12 matches found
Fedora 40 : php-adodb (2025-101800c1e1)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-101800c1e1 advisory. 5.22.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...
CISA Releases Eight Industrial Control Systems Advisories
CISA released eight Industrial Control Systems ICS advisories on December 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-354-01 Hitachi Energy RTU500 series CMU ICSA-24-354-02 Hitachi Energy SDM600...
CVE-2024-43640
creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471740890371912...
CISA Releases Two Industrial Control Systems Advisories
CISA released two Industrial Control Systems ICS advisories on February 6, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-037-01 HID Global Encoders ICSA-24-037-02 HID Global Reader Configuration Cards CISA...
CISA Releases One Industrial Control Systems Advisory
CISA released one Industrial Control Systems ICS advisory on August 1, 2023. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-213-01 APSystems Altenergy Power Control CISA encourages users and administrators to review...
CVE-2021-20837
creationtimestamp| type| source ---|---|--- 2021-10-25 21:30:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/745 2021-10-27 16:40:30+00:00| published-proof-of-concept| https://t.me/cKure/7792 2021-10-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50464 2021-10-...
Reboot of PunkSpider Tool at DEF CON Stirs Debate
Researchers will release a reboot of a controversial tool that crawls the web to identify back-end vulnerabilities in websites in the hopes that companies will quickly fix them and reduce security risks. However, experts have mixed feelings about the tool called PunkSpider, created by the analyti...
LinksCaffePRO 4.5 SQL Injection / XSS
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Inventory Manager - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/21069/info Inventory Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Successful exploits of these vulnerabiliti...
Cyrus IMAP Server: Multiple remote vulnerabilities
Background The Cyrus IMAP Server is an efficient, highly-scalable IMAP e-mail server. Description Multiple vulnerabilities have been discovered in the argument parsers of the 'partial' and 'fetch' commands of the Cyrus IMAP Server CAN-2004-1012, CAN-2004-1013. There are also buffer overflows in t...
[SA12840] DevoyBB Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities
TITLE: DevoyBB Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA12840 VERIFY ADVISORY: http://secunia.com/advisories/12840/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: DevoyBB 1.x...