4092 matches found
Cisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass (cisco-sa-rv-auth-bypass-cGv9EruZ)
According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by an authentication bypass vulnerability due to improper session management on affected devices. An unauthenticated, remote attacker can exploit this, by sending a crafted HTTP request to the...
Vulmap
This is an open-source online local vulnerability scanner project called Vulmap. It consists of online local vulnerability scanning programs for Windows and Linux operating systems. The project is designed to scan installed software on the host, query the Vulmon API for vulnerabilities, and print...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
SMBGhost CVE-2020-0796 and SMBleed CVE-2020-1206 Scanner...
WordPress 5.4.x < 5.4.2 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exist in the block editor. - A cross-site scripting XSS vulnerability exist in media files. - An open redirect vulnerability exist...
Sifter 7.4 - OSINT, Recon & Vulnerability Scanner
Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsft and if unpatched, exploit...
SUSE SLED15 / SLES15 Security Update : file-roller (SUSE-SU-2020:1557-1)
This update for file-roller fixes the following issues : CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting of a...
Debian DLA-2238-1 : libupnp security update
libupnp, the portable SDK for UPnP Devices allows remote attackers to cause a denial of service crash via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/servicetable/servicetable.c. This crash can be...
trivy-action
Trivy Action GitHub Actionhttps://github.com/features/ac...
Beckhoff Ipc Improper Access Control
Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service reboot or shutdown, create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a...
Debian DLA-2192-1 : ruby2.1 security update
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.1 has an unsafe object creation vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object...
CentOS 7 : cups (RHSA-2020:1050)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1050 advisory. - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions. CVE-2018-4180, CVE-2018-41...
Check Point Gaia Operating System Administrator password truncation (sk156192)
The remote host is running a version of the Gaia Operating System which is affected by multiple vulnerabilities involving the Linux Kernel's handling of TCP networking. - It is possible to overflow the 16bit width of TCPSKBCBskb-tcpgsosegs which could result in the system crashing resulting in a...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The sc...
Debian DLA-2117-1 : zsh security update
A privilege escalation vulnerability was discovered in zsh, a shell with lots of features, whereby a user could regain a formerly elevated privelege level even when such an action should not be permitted. For Debian 8 'Jessie', this problem has been fixed in version 5.0.7-5+deb8u1. We recommend...
Apache Tomcat 7.0.x < 7.0.99 Session Fixation
The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 or 7.0.0 to 7.0.98. It is, therefore, affected by a session fixation vulnerability when using FORM authentication. Note that the scanner has not attempted to exploit these issues but has instead relie...
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability (cisco-sa-ise-xss-DxJsRWRx)
A cross-site scripting XSS vulnerability exists in the web-based management interface of Cisco Identity Services Engine ISE due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, by providing malicious data to a specific...
Takeover v0.2 - Sub-Domain TakeOver Vulnerability Scanner
Sub-domain takeover vulnerability occur when a sub-domain subdomain.example.com is pointing to a service e.g: GitHub , AWS/S3 ,.. that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page to that sub-domain. For example, if...
Exploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware
CVE-2019-19781 This was only uploaded due to other researcher...
Vulmap
This is a Python script for a local vulnerability scanner, specifically designed for Linux systems. The script, named Vulmap, is part of the Vulmap Local Vulnerability Scanners project. It scans the host for installed packages, queries the Vulmon API for vulnerabilities, and prints the results,...