9609 matches found
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none...
Wikileaks Unveils CIA's Man-in-the-Middle Attack Tool
Wikileaks has published a new batch of the Vault 7 leak, detailing a man-in-the-middle MitM attack tool allegedly created by the United States Central Intelligence Agency CIA to target local networks. Since March, WikiLeaks has published thousands of documents and other secret tools that the...
CVE-2017-8789
An issue was discovered on Accellion FTA devices before FTA912180. A reporterror.php?year='payload SQL injection vector exists...
PT-2017-18529
Name of the Vulnerable Software and Affected Versions Accellion FTA versions prior to FTA 9 12 180 Description A SQL injection issue exists due to a report error.php API endpoint that is vulnerable to injection attacks. The year parameter is specifically mentioned as a vector for this injection...
The Backstory Behind Carder Kingpin Roman Seleznev’s Record 27 Year Prison Sentence
Roman Seleznev, a 32-year-old Russian cybercriminal and prolific credit card thief, was sentenced Friday to 27 years in federal prison. That is a record punishment for hacking violations in the United States and by all accounts one designed to send a message to criminal hackers everywhere. But a...
CVE-2016-4869
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed...
CVE-2016-6534
Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...
CVE-2017-6451
The mx4200send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write...
SambaCry, the Seven Year Old Samba Vulnerability, is the Next Big Threat (for now)
As Samba is used as part of many organizations storage systems, we will discuss the impact of the vulnerability on organizations and home users...
accghana.com XSS vulnerability
Open Bug Bounty ID: OBB-219811 Description| Value ---|--- Affected Website:| accghana.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware
PoC misc PoC - Internet of InSecurity Things Well worth to...
isg.fr XSS vulnerability
Open Bug Bounty ID: OBB-217303 Description| Value ---|--- Affected Website:| isg.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
minilex.de XSS vulnerability
Open Bug Bounty ID: OBB-216413 Description| Value ---|--- Affected Website:| minilex.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
UBUNTU-CVE-2016-9827
The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF file...
b2evolution directory traversal vulnerability (CNVD-2017-01294)
b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. b2evolution suffers from a directory traversal vulnerability that stems from an incomplete fix for the directory traversal vulnerability CVE-2017-5480 patch. An attacker via ... / can bypass...
prediger-katechet.de XSS vulnerability
Open Bug Bounty ID: OBB-208207 Description| Value ---|--- Affected Website:| prediger-katechet.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ne-mo.org XSS vulnerability
Open Bug Bounty ID: OBB-208073 Description| Value ---|--- Affected Website:| ne-mo.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...