Lucene search
+L

1170 matches found

Tenable Nessus
Tenable Nessus
added 2024/06/03 12:00 a.m.34 views

RHEL 5 : xmlrpc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xmlrpc: XML external entity vulnerability SSRF via a crafted DTD CVE-2016-5002 - xmlrpc: Deserialization ...

9.8CVSS7.8AI score0.14876EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:00 a.m.27 views

RHEL 5 : xmlrpc-c (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - expat: buffer over-read and crash in big2toUtf8 on XML with malformed UTF-8 sequences CVE-2009-3560 Note that Nessu...

5CVSS7AI score0.24313EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:00 a.m.47 views

RHEL 8 : cobbler (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cobbler: XMLRPC API endpoints are not correctly validating security tokens CVE-2018-1000226 - Cobbler...

9.8CVSS7.7AI score0.12584EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:00 a.m.32 views

RHEL 6 : xmlrpc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xmlrpc: XML external entity vulnerability SSRF via a crafted DTD CVE-2016-5002 - The Content-Encoding HTT...

7.8CVSS7.3AI score0.08275EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2024/05/20 12:00 a.m.308 views

Apache OFBiz 18.12.12 Directory Traversal

Exploit Title: Apache OFBiz 18.12.12 - Directory Traversal Google Dork: N/A Date: 2024-05-16 Exploit Author: Abdualhadi khalifa https://twitter.com/absholily Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://ofbiz.apache.org/download.html Version: below example.createBlogPost...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2024/05/19 12:00 a.m.364 views

Apache OFBiz 18.12.12 - Directory Traversal

Exploit Title: Apache OFBiz 18.12.12 - Directory Traversal Google Dork: N/A Date: 2024-05-16 Exploit Author: Abdualhadi khalifa https://twitter.com/absholily Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://ofbiz.apache.org/download.html Version: below example.createBlogPost...

9.8CVSS8.6AI score0.99442EPSS
SaveExploits8
zdt
zdt
added 2024/05/19 12:00 a.m.309 views

Apache OFBiz 18.12.12 - Directory Traversal Vulnerability

Exploit Title: Apache OFBiz 18.12.12 - Directory Traversal Google Dork: N/A Exploit Author: Abdualhadi khalifa https://twitter.com/absholily Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://ofbiz.apache.org/download.html Version: below example.createBlogPost...

9.8CVSS7.2AI score0.99442EPSS
SaveExploits8
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.34 views

RHEL 8 : cobbler (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cobbler: XMLRPC API endpoints are not correctly validating security tokens CVE-2018-1000226 - Cobbler...

8.6AI score0.12584EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.41 views

RHEL 5 : xmlrpc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xmlrpc: XML external entity vulnerability SSRF via a crafted DTD CVE-2016-5002 - xmlrpc: Deserialization ...

7.4AI score0.14876EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.39 views

RHEL 7 : xmlrpc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xmlrpc: XML external entity vulnerability SSRF via a crafted DTD CVE-2016-5002 - xmlrpc: Deserialization ...

7.4AI score0.14876EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.53 views

RHEL 6 : xmlrpc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xmlrpc: XML external entity vulnerability SSRF via a crafted DTD CVE-2016-5002 - The Content-Encoding HTT...

7.6AI score0.08275EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/04/27 12:00 a.m.31 views

RHEL 6 / 7 : rh-java-common-xmlrpc (RHSA-2018:1784)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1784 advisory. Apache XML-RPC is a Java implementation of XML-RPC, a popular protocol that uses XML over HTTP to implement remote procedure calls. Security Fixe...

9.8CVSS8.1AI score0.14876EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2024/02/29 12:00 a.m.50 views

CentOS 9 : xmlrpc-c-1.51.0-16.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the xmlrpc-c-1.51.0-16.el9 build changelog. - xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs. CVE-2022-25236 Not...

9.8CVSS7.3AI score0.35867EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/28 11:15 a.m.14 views

CVE-2023-50858

Cross-Site Request Forgery CSRF vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan: from n/a through 4.34...

8.8CVSS7.3AI score0.00196EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/28 11:15 a.m.45 views

CVE-2023-50858

Cross-Site Request Forgery CSRF vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan: from n/a through 4.34...

8.8CVSS0.00196EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/28 11:15 a.m.36 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan: from n/a through 4.34...

6.8CVSS7.2AI score0.00196EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/28 10:31 a.m.97 views

CVE-2023-50858

CVE-2023-50858 is described as a CSRF vulnerability affecting the WordPress plugin antihacker (Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan). The supplied documents do not include concrete technical details (payloads, affected versions, root cause, im...

8.8CVSS8.5AI score0.00196EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/28 10:31 a.m.67 views

CVE-2023-50858 WordPress Anti Hacker Plugin <= 4.34 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan: from n/a through 4.34...

5.4CVSS8.9AI score0.00196EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/07 4:15 p.m.24 views

CVE-2023-49967

Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xmlrpc...

7.5CVSS0.00749EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/07 4:15 p.m.9 views

CVE-2023-49967

Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xmlrpc...

7.5CVSS7AI score0.00749EPSS
SaveExploits1References2
Rows per page
Query Builder