Lucene search
+L

2450 matches found

CNVD
CNVD
added 2020/03/23 12:0 a.m.2 views

SQL Injection Vulnerability in VIP Movie System Background

Tuan ah VIP movie system is a set of VIP movie with registered members of the proxy version of the video viewing site source code, mobile version of adaptive access. Tuan ah VIP movie system background SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

7.8AI score
SaveExploits0
OSV
OSV
added 2020/03/12 4:15 p.m.4 views

CVE-2020-0787

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service BITS improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'...

7.8CVSS7.4AI score0.42524EPSS
SaveExploits7References3
Vulnrichment
Vulnrichment
added 2020/03/12 3:48 p.m.10 views

CVE-2020-0787

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service BITS improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'...

7AI score0.42524EPSS
SaveExploits7References2
Positive Technologies
Positive Technologies
added 2020/03/10 12:0 a.m.5 views

PT-2020-1912

Name of the Vulnerable Software and Affected Versions Windows Background Intelligent Transfer Service BITS versions prior to the fixed version Description The issue is related to errors in handling symbolic links that display paths to files and directories. This can allow an attacker to elevate...

7.8CVSS9AI score0.42524EPSS
SaveExploits7References36
Tenable Nessus
Tenable Nessus
added 2020/03/10 12:0 a.m.107 views

KB4540670: Windows 10 Version 1607 and Windows Server 2016 March 2020 Security Update

The remote Windows host is missing security update 4540670. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully exploited this vulnerability...

10CVSS7.9AI score0.42524EPSS
SaveExploits9References86
OSV
OSV
added 2020/03/04 2:15 p.m.7 views

CVE-2019-3404

By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication. This affects 360 router P0 and F5C...

7.5CVSS7.1AI score0.00906EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/03/04 1:1 p.m.24 views

CVE-2019-3404

By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication. This affects 360 router P0 and F5C...

7.5AI score0.00906EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/02/24 12:0 a.m.1 views

Universal Password Bypass Vulnerability in KODAK Multimedia Recording and Broadcasting System of Suzhou KODAK Technology Co.

Ltd. is a provider of video and security products and solutions, dedicated to video conferencing, video surveillance and video application solutions to help various government and enterprise customers to solve visual communication and management challenges. Ltd. Kodak multimedia recording system...

7AI score
SaveExploits0
CNVD
CNVD
added 2020/02/23 12:0 a.m.5 views

Pagoda Linux Panel of Dongguan Baita Network Technology Co., Ltd. suffers from logic flaw vulnerability

Pagoda Linux Panel is the server management software to improve the efficiency of operation and maintenance, supports one-click LAMP/LNMP/cluster/monitoring/website/FTP/database/JAVA and more than 100 server management functions. Pagoda Linux Panel of Dongguan Beta Network Technology Co., Ltd...

6.7AI score
SaveExploits0
ICS
ICS
added 2020/02/11 12:0 a.m.115 views

Siemens OZW Web Server

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: OZW web server Vulnerability: Information disclosure 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unauthenticated users to access project files...

7.5CVSS7.7AI score0.01617EPSS
SaveExploits0References9
OSV
OSV
added 2020/02/07 4:15 p.m.5 views

CVE-2020-1768

The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...

5.4CVSS6AI score0.00747EPSS
SaveExploits0References1
NVD
NVD
added 2020/02/07 4:15 p.m.28 views

CVE-2020-1768

The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...

5.5CVSS5.4AI score0.00747EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/07 4:15 p.m.36 views

UBUNTU-CVE-2020-1768

The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...

5.4CVSS6AI score0.00747EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2020/02/07 4:15 p.m.32 views

CVE-2020-1768

The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...

5.5CVSS6.1AI score0.00747EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2020/02/07 3:42 p.m.61 views

CVE-2020-1768

The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions...

5.5CVSS5.4AI score0.00747EPSS
SaveExploits0
Kitploit
Kitploit
added 2020/01/16 11:30 a.m.83 views

LOLBITS - C# Reverse Shell Using Background Intelligent Transfer Service (BITS) As Communication Protocol

LOLBITS is a C reverse shell that uses Microsoft's Background Intelligent Transfer Service BITS to communicate with the Command and Control backend. The Command and Control backend is hidden behind an apparently harmless flask web application and it's only accesible when the HTTP requests receive...

8.2AI score
SaveExploits0References5
CNVD
CNVD
added 2020/01/11 12:0 a.m.3 views

Login Bypass Vulnerability in Flying Fish Star Enterprise Intelligent Wireless Internet Behavior Management System

Chengdu Flying Fish Star Technology Co., Ltd. is a value-added service that serves enterprise, business and home users with intelligent and easy-to-use network communication management devices and innovative technologies. A login bypass vulnerability exists in the Flyingfish Star Enterprise...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/01/09 12:0 a.m.5 views

SQL Injection Vulnerability in the Background Administration A***t.asp Page of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system background management At.asp page SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2020/01/09 12:0 a.m.5 views

SQL Injection Vulnerability in the Background Administration C***t.asp Page of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system background management Ct.asp page there is a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/01/07 12:0 a.m.5 views

Universal Password Bypass Vulnerability in Xusoft09 System Enterprise SEO Site

XUsoft09 fully static article system based on asp can be used to build self-presentation type websites for individuals, small and medium-sized enterprises or other organizations. Xusoft09 system enterprise SEO station exists universal password bypass vulnerability, attackers can use the...

7AI score
SaveExploits0
Rows per page
Query Builder