Lucene search
+L

375 matches found

Cvelist
Cvelist
•added 2015/11/21 11:00 a.m.•30 views

CVE-2015-7777

Cross-site scripting XSS vulnerability in index.php in JosephErnest Void before 2015-10-02 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

5.6AI score0.01786EPSS
SaveExploits0References3
CVE
CVE
•added 2015/11/21 11:00 a.m.•57 views

CVE-2015-7777

CVE-2015-7777 corresponds to a cross-site scripting (XSS) vulnerability in the index.php script of the JosephErnest Void CMS, exploitable via a crafted URI to affect Void versions released before 2015-10-02. Public sources in connected documents confirm the affected product (Void CMS), the vulner...

4.3CVSS5.8AI score0.01786EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/21 12:00 a.m.•10 views

CVE-2015-7777: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in JosephErnest Void before 2015-10-02 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

4.3CVSS5.9AI score0.01786EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/11/21 12:00 a.m.•5 views

PT-2015-7604

Name of the Vulnerable Software and Affected Versions JosephErnest Void versions prior to 2015-10-02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URI. This occurs in the index.php file. Recommendations For versions prior...

4.3CVSS0.01786EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/11/20 4:38 a.m.•14 views

Void vulnerable to cross-site scripting

Overview Void is an open source content management system CMS. Void contains a cross-site scripting vulnerability CWE-79. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA under Information Security Early Warning Partnership. Impact An arbitrary script may be...

4.3CVSS6AI score0.01786EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/11/20 12:00 a.m.•38 views

JVN#20649799: Void vulnerable to cross-site scripting

Void is an open source content management system CMS. Void contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Apply an update Update to the latest version according to the information provided by the developer...

4.3CVSS5.8AI score0.01786EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2015/04/28 12:00 a.m.•14 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xorg-x11-drv-void-1.4.0 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

6.8CVSS5.4AI score0.01683EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2014/10/21 10:55 a.m.•5 views

CVE-2014-7794

The Knights of the Void aka me.narr8.android.serial.knightsofthevoid application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.5AI score0.00266EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2014/10/21 10:00 a.m.•30 views

CVE-2014-7794

The Knights of the Void aka me.narr8.android.serial.knightsofthevoid application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/21 12:00 a.m.•7 views

CVE-2014-7794: Undefined Security Weakness

The Knights of the Void aka me.narr8.android.serial.knightsofthevoid application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2014/08/21 12:00 a.m.•27 views

openSUSE Security Update : gpgme (openSUSE-SU-2014:1039-1)

This gpgme update to version 1.4.4 fixes the following security and non i security issues : - Fixed possible overflow in gpgsm and uiserver engines. CVE-2014-3564, bnc890123 - Fixed possibled segv in gpgmeopcardedit. - Fixed minor memleaks and possible zombie processes. - Fixed prototype...

6.8CVSS5.4AI score0.04289EPSS
SaveExploits0References3
Exploit DB
Exploit DB
•added 2011/07/18 12:00 a.m.•28 views

win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes

win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes. Shellcode exploit for win32 platform Title : win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes Author : KaHPeSeSe Screenshot : http://i53.tinypic.com/289yamq.jpg Desc. : usr: kpss , pass: 12345 , localgroup: Administrator Tested on ...

7.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/01/05 1:34 a.m.•11 views

Nook Color Bluetooth Chip Hacked !

Barnes and Noble's full color touch screen, Wi-Fi and 3G enabled eReader tablet NOOK color ships with a Bluetooth chip that is not activated. Well, not anymore. A user occip at XDA-developers has managed to start the Bluetooth on the device and scanning and connecting to devices is working well...

6.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2007/09/19 12:00 a.m.•18 views

Mercury/32 4.52 IMAPD SEARCH command Post-Auth Overflow Exploit

No description provided by source. Z:ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void ph4nt0m.org S: pst06...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/09/19 12:00 a.m.•63 views

Mercury/32 4.52 IMAPD - 'SEARCH' (Authenticated) Overflow

Z:\ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found & Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void ph4nt0m.org S: pst06 OK LOGIN completed. C: pst06...

6CVSS5.8AI score0.03649EPSS
SaveExploits2
Rows per page
Query Builder