Lucene search
+L

2438 matches found

Positive Technologies
Positive Technologies
•added 2020/12/14 12:00 a.m.•23 views

PT-2025-29319

Name of the Vulnerable Software and Affected Versions: Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid versions through 1.14.9 Description: The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is susceptible to sensitive...

7.5CVSS5.2AI score0.01633EPSS
SaveExploits2References15
Exploit DB
Exploit DB
•added 2020/12/14 12:00 a.m.•871 views

WordPress Plugin Total Upkeep 1.14.9 - Database and Files Backup Download

Exploit Title: WordPress Plugin Total Upkeep 1.14.9 - Database and Files Backup Download Google Dork: intitle:"Index of" AND "wp-content/plugins/boldgrid-backup/=" Date: 2020-12-12 Exploit Author: Wadeek Vendor Homepage: https://www.boldgrid.com/ Software Link:...

5.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2020/12/12 12:00 a.m.•113 views

WordPress Total Upkeep Unauthenticated Backup Downloader

This module exploits an unauthenticated database backup vulnerability in WordPress plugin 'Boldgrid-Backup' also known as 'Total Upkeep' version use auxiliary/scanner/http/wp/totalupkeepdownloader msf undefinedtotalupkeepdownloader show actions ...actions... msf undefinedtotalupkeepdownloader set...

7.5CVSS5.3AI score0.01633EPSS
SaveExploits2
CNNVD
CNNVD
•added 2020/12/08 12:00 a.m.•16 views

Contiki Buffer Error Vulnerability

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. Contiki 3.0 suffers from a buffer error vulnerability that stems from an inability to validate the total length of incoming packets specified in its IP header as well as the segmentation offset value...

9.8CVSS7.5AI score0.19294EPSS
SaveExploits0References8
Rapid7 Blog
Rapid7 Blog
•added 2020/12/07 10:05 p.m.•41 views

Congrats to the winners of the 2020 December Metasploit community CTF

Thank you all that participated in the 2020 December Metasploit community CTF! The four day CTF was well received by the community, with 874 teams and 1903 users registered! We’ve included the high-level stats and the competition winners below. If you played the CTF and want to let the Metasploit...

7AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/02 12:00 a.m.•26 views

McAfee Total Protection Elevation of Privilege Vulnerability

McAfee Total Protection is a one-stop security suite. An elevation of privilege vulnerability exists in McAfee Total Protection versions prior to 16.0.29. An attacker can exploit the elevation of privilege vulnerability by creating a junction link to manipulate a folder...

7.8CVSS6.8AI score0.00434EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/01 7:15 p.m.•13 views

CVE-2020-28573

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server...

5.3CVSS6.1AI score0.03245EPSS
SaveExploits0References3
OSV
OSV
•added 2020/12/01 9:15 a.m.•12 views

CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

7.8CVSS7.1AI score0.00434EPSS
SaveExploits0References2
NVD
NVD
•added 2020/12/01 9:15 a.m.•25 views

CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

7.8CVSS7.5AI score0.00434EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/12/01 9:15 a.m.•8 views

CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

7.8CVSS7.1AI score0.00434EPSS
SaveExploits0References3
Prion
Prion
•added 2020/12/01 9:15 a.m.•21 views

Privilege escalation

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

4.4CVSS7.5AI score0.00434EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/12/01 8:50 a.m.•36 views

CVE-2020-7335 Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

7.5CVSS7.6AI score0.00434EPSS
SaveExploits0References2
CVE
CVE
•added 2020/12/01 8:50 a.m.•75 views

CVE-2020-7335

CVE-2020-7335 affects McAfee Total Protection for Windows prior to 16.0.29. The flaw is a local privilege escalation via manipulation of a folder using a junction link, exploiting a timing-related protection gap. Impact is elevated privileges (local user) with full system access in some vectors; ...

7.8CVSS7.5AI score0.00434EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2020/12/01 12:00 a.m.•41 views

McAfee Total Protection Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of McAfee Total Protection. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

7CVSS4.2AI score0.00434EPSS
SaveExploits0References1
OSV
OSV
•added 2020/11/30 8:15 p.m.•14 views

CVE-2020-27587

Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vault via a brute-force attack on the password...

6.7CVSS5.8AI score0.00363EPSS
SaveExploits1References1
NVD
NVD
•added 2020/11/30 8:15 p.m.•23 views

CVE-2020-27586

Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text...

5.9CVSS5.8AI score0.00696EPSS
SaveExploits1References1
OSV
OSV
•added 2020/11/30 8:15 p.m.•13 views

CVE-2020-27585

Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack on the settings password...

4.4CVSS5.8AI score0.00318EPSS
SaveExploits1References1
NVD
NVD
•added 2020/11/30 8:15 p.m.•21 views

CVE-2020-27585

Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack on the settings password...

4.4CVSS4.5AI score0.00318EPSS
SaveExploits1References1
NVD
NVD
•added 2020/11/30 8:15 p.m.•16 views

CVE-2020-27587

Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vault via a brute-force attack on the password...

6.7CVSS6.2AI score0.00363EPSS
SaveExploits1References1
Prion
Prion
•added 2020/11/30 8:15 p.m.•23 views

Default credentials

Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vault via a brute-force attack on the password...

2.1CVSS6.2AI score0.00363EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder