Lucene search
+L

3306 matches found

Patchstack
Patchstack
added 2020/11/24 12:0 a.m.19 views

WordPress Media Library Assistant plugin <= 2.84 - Authenticated Blind SQL Injection (SQLi) vulnerability

Authenticated Blind SQL Injection SQLi vulnerability found by Lenon Leite in WordPress Media Library Assistant plugin versions = 2.84. Solution Update the WordPress Media Library Assistant plugin to the latest available version at least 2.9.0...

4.6AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.8 views

The vulnerability of the Intel Endpoint Management Assistant cloud service arises from an incorrect path name limitation for the restricted access catalog. This allows attackers to escalate their privileges.

The vulnerability of the Intel Endpoint Management Assistant cloud service exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

8.6CVSS7.7AI score0.01727EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2020/11/23 12:0 a.m.3 views

Intel Driver Support Assistant Default Configuration Issue Vulnerability

Intel Driver & Support Assistant is an Intel driver and support management tool from Intel Corporation USA. This tool is mainly used to get the latest applications provided by Intel. A default configuration issue vulnerability exists in Incorrect default permissions in IntelR DSA versions prior t...

5.5CVSS6.7AI score0.00244EPSS
SaveExploits0References1
Citrix
Citrix
added 2020/11/09 12:0 a.m.9 views

Citrix LTSR Assistant Tool

Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools LTSR Assistantv2.9.0.1 Created Date: Apr 12, 2016 Updated Date: Apr 16, 2025 What's New inv2.9.0.1 Fixed a sporadic issue that prevented...

7AI score
SaveExploits0
zdt
zdt
added 2020/11/09 12:0 a.m.25 views

HP Display Assistant x64 Edition 3.20 - (DTSRVC) Unquoted Service Path Vulnerability

Exploit Title: HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path Exploit Author: Julio Aviña Vendor Homepage: https://www.portrait.com/ Software Link: https://www.portrait.com/dtune/hwp/enu/ Software Version: 3.20 File Version: 1.0.0.1 Tested on: Windows 10 Pro x64 es...

7.4AI score
SaveExploits0
Citrix
Citrix
added 2020/11/09 12:0 a.m.34 views

Citrix Health Assistant - Troubleshoot VDA Registration and Session Launch

Citrix Virtual Apps and Desktops, formerly XenDesktop, fits the enterprise need to bring both VDI and apps into a user-centric experience. Citrix Virtual Apps, formerly XenApp, fits the enterprise need to bring legacy apps into a cloud management environment. Citrix Health Assistantv1.8.3.71...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/11/09 12:0 a.m.463 views

HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path

Exploit Title: HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path Date: 2020-11-08 Exploit Author: Julio Aviña Vendor Homepage: https://www.portrait.com/ Software Link: https://www.portrait.com/dtune/hwp/enu/ Software Version: 3.20 File Version: 1.0.0.1 Tested on: Windows 10 P...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/11/08 12:0 a.m.157 views

HP Display Assistant x64 Edition 3.20 Unquoted Service Path

Exploit Title: HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path Date: 2020-11-08 Exploit Author: Julio Aviña Vendor Homepage: https://www.portrait.com/ Software Link: https://www.portrait.com/dtune/hwp/enu/ Software Version: 3.20 File Version: 1.0.0.1 Tested on: Windows 10 P...

0.1AI score
SaveExploits0
CNVD
CNVD
added 2020/10/22 12:0 a.m.3 views

Command Execution Vulnerability in Anaconda Self-Marketing Assistant

Python Self-Media Marketing Assistant is a self-media marketing tool that integrates the functions of public number assistant and WeChat editor. Anaconda Media Marketing Assistant has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/10/22 12:0 a.m.13 views

Windows Migration Assistant Installed

Binary data windowsmigrationassistantinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/10/22 12:0 a.m.21 views

Windows Migration Assistant < 2.2.0.0 Arbitrary Code Execution (HT211186)

According to its self-reported version number, the version of Windows Migration Assistant installed on the remote host is prior to 2.2.0.0. It is, therefore, affected by an arbitrary code execution vulnerability due to a dynamic library loading issue. An unauthenticated, local attacker can exploi...

7.8CVSS8.3AI score0.00469EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.10 views

The vulnerability of the Intel Driver & Support Assistant software lies in its susceptibility to insecure privilege management, allowing attackers to escalate their privileges.

The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to insecure handling of privileges. Exploiting this vulnerability can allow a hacker to enhance their own privileges...

4.4CVSS7.2AI score0.00282EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/10/16 12:0 a.m.4 views

CAD Quick Look - Editing Assistant pc client software has a command execution vulnerability

Quanta Technology Co., Ltd. is a listed software company, based on the field of construction engineering, centering on the whole life cycle of engineering projects, providing professional applications in the field of construction engineering as the core basic support, and value-added services suc...

7.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/14 4:36 p.m.12 views

rkprivat.sk Cross Site Scripting vulnerability OBB-1408618

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
OSV
OSV
added 2020/10/09 6:15 a.m.6 views

CVE-2020-13626

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

4.6CVSS5.8AI score0.00315EPSS
SaveExploits0References2
NVD
NVD
added 2020/10/09 6:15 a.m.33 views

CVE-2020-13626

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

4.6CVSS0.00315EPSS
SaveExploits0References2
Prion
Prion
added 2020/10/09 6:15 a.m.20 views

Authorization

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

2.1CVSS4.8AI score0.00315EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/10/09 5:2 a.m.34 views

CVE-2020-13626

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

4.8AI score0.00315EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2020/10/08 3:14 p.m.11 views

korealeadercctv.co.kr Cross Site Scripting vulnerability OBB-1390971

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
OSV
OSV
added 2020/10/05 2:15 p.m.3 views

CVE-2020-12302

Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00282EPSS
SaveExploits0References1
Rows per page
Query Builder