Lucene search
+L

621 matches found

Kitploit
Kitploit
added 2018/02/09 8:23 p.m.49 views

roxysploit - Penetration Testing Suite

roxysploit is a community-supported, open-source and penetration testing suite that supports attacks for numerous scenarios. conducting attacks in the field. Some containing Plugins in roxysploit Scan is a automated Information gathering plugin it gives the user the ability to have a rest while t...

8.1AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2018/01/23 4:55 p.m.7 views

auroraumc.org XSS vulnerability

Open Bug Bounty ID: OBB-539802 Description| Value ---|--- Affected Website:| auroraumc.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
0day.today
0day.today
added 2017/12/22 12:0 a.m.156 views

Xbox 360 Aurora 0.6b Default Credentials / FTP BruteForce Exploit

Exploit for linux platform in category remote exploits Exploit Title: XBOX 360 Aurora 0.6b Default Credentials / FTP BruteForce Date: 20/12/2017 Exploit Author: Daniel Godoy Vendor Homepage: http://phoenix.xboxunity.net//news Tested on: XBOX 360 GREETZ: Iker Legorreta, RemoteExecution Team...

7.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/11/30 10:9 p.m.16 views

aurora-online.ru XSS vulnerability

Open Bug Bounty ID: OBB-444688 Description| Value ---|--- Affected Website:| aurora-online.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/10/20 3:7 p.m.16 views

auroranicaraguarealestate.com XSS vulnerability

Vulnerable URL: http://auroranicaraguarealestate.com/nicaraguarealestate/searchresult.php?price=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

6.3AI score
SaveExploits0
OSV
OSV
added 2017/10/10 8:29 p.m.6 views

CVE-2017-11046

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur...

7.8CVSS5.7AI score0.00151EPSS
SaveExploits0References2
OSV
OSV
added 2017/10/10 8:29 p.m.7 views

CVE-2017-11056

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while doing sha and cipher operations, a userspace buffer is directly accessed in kernel space potentially leading to a page fault...

7.8CVSS6AI score0.00151EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2017/09/21 12:0 a.m.64 views

AfterLogic Aurora / Webmail XSS Vulnerability (Aug 2017)

AfterLogic Aurora/WebMail is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

4.8CVSS5AI score0.00516EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2017/09/20 12:0 a.m.25 views

AfterLogic Aurora / WebMail Detection (HTTP)

HTTP based detection of AfterLogic Aurora / WebMail. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7AI score
SaveExploits0References2
NVD
NVD
added 2017/09/19 7:29 a.m.14 views

CVE-2017-14597

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

4.8CVSS4.9AI score0.00516EPSS
SaveExploits1References1
Prion
Prion
added 2017/09/19 7:29 a.m.14 views

Design/Logic Flaw

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

3.5CVSS4.8AI score0.00516EPSS
SaveExploits1References1Affected Software2
Cvelist
Cvelist
added 2017/09/19 7:0 a.m.17 views

CVE-2017-14597

AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...

4.9AI score0.00516EPSS
SaveExploits1References1
CVE
CVE
added 2017/09/19 7:0 a.m.63 views

CVE-2017-14597

Affected software: AfterLogic WebMail 7.7 and Aurora 7.7.5; component: AdminPanel via adminpanel/modules/pro/inc/ajax.php. Issue: cross-site scripting (XSS) vulnerability exploitable via the txtDomainName field during domain addition. Root cause: improper handling of input in the AdminPanel domai...

4.8CVSS4.8AI score0.00516EPSS
SaveExploits1References1Affected Software2
CNVD
CNVD
added 2017/09/19 12:0 a.m.5 views

AfterLogic WebMail and Aurora Cross-Site Scripting Vulnerabilities

AfterLogic WebMail and Aurora are both products of AfterLogic, Inc. AfterLogic Aurora is a set of enterprise-class e-mail servers.WebMail is an e-mail client.AdminPanel is one of the back-end management systems. A cross-site scripting vulnerability exists in AfterLogic WebMail version 7.7 and...

4.8CVSS6.4AI score0.00516EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2017/09/15 12:0 a.m.6 views

The vulnerability in the application for the Android camera driver from the CAF repository, which allows a intruder to trigger a reread of dynamic memory buffers.

The vulnerability in the Android camera driver application from the CAF repository arises from an operation that goes beyond the buffer boundaries in memory when processing the frame/command component with invalid values. Exploiting this vulnerability allows a remote attacker to trigger the...

9.3CVSS7.5AI score0.0046EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/15 12:0 a.m.8 views

The vulnerability of the WLAN driver of the Android operating system from the CAF repository, which allows a hacker to trigger a memory access after it is freed

The vulnerability of the WLAN driver for the Android operating system, found in the CAF repository, is caused by synchronization errors when using a shared resource during gameplay. Exploiting this vulnerability allows a remote attacker to access memory after it has been freed...

9.3CVSS7.4AI score0.00487EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/13 12:0 a.m.6 views

The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, is due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to cause breaches of the confidentiality,...

7.6CVSS7.2AI score0.00541EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.8 views

The vulnerability of the Android operating system from the CAF repository exists due to pointer assignment errors, allowing attackers to cause memory corruption.

The vulnerability of the Android operating system from the CAF repository is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause memory corruption in the Guest OS...

10CVSS7.9AI score0.00807EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.10 views

The vulnerability of the Android operating system from the CAF repository exists due to errors in WCDMA configuration settings. This allows a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability of the Android operating system from the CAF repository is related to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise privacy, integrity, and accessibility when setting the WCDMA mode...

10CVSS8.3AI score0.00904EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.9 views

The vulnerability in the task management of the 1x Android operating system from the CAF repository allows a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability in the task management of the 1x Android operating system arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to compromise privacy, integrity, and accessibility...

10CVSS8AI score0.01184EPSS
SaveExploits0References2
Rows per page
Query Builder