security-research

It is an offensive tool for web applications. The repository con...

CVE-2018-0563: Untrusted Search Path

Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi...

PT-2018-8921

Name of the Vulnerable Software and Affected Versions FLET'S VIRUS CLEAR Easy Setup & Application Tool versions 13.0 and earlier FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool versions 13.0 and earlier Description The issue is related to an untrusted search path vulnerability in the installe...

PT-2018-8866

Name of the Vulnerable Software and Affected Versions FLET'S VIRUS CLEAR Easy Setup & Application Tool versions prior to ver.12 FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool versions prior to ver.12 Description The issue allows an attacker to gain privileges via a Trojan horse DLL in an...

CVE-2018-0507: Untrusted Search Path

Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2180

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors...

Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to information disclosure

Overview AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains an information disclosure vulnerability. Masato Kinugawa reported this vulnerability to IPA...

Java Development Kit Data Compromise

The vulnerability of the Java Development Kit application development tool relates to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data by using the AWT subcomponent...