Lucene search
+L

488 matches found

CVE
CVE
•added 2017/02/01 3:00 p.m.•132 views

CVE-2016-9963

Exim (mail transfer agent) is affected by CVE-2016-9963. Exim before 4.87.1 may leak the private DKIM signing key to log files via vectors related to log files and bounce messages. The leakage is contingent on specific configurations and log access, enabling an attacker with log access to obtain ...

5.9CVSS4.8AI score0.03098EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2017/02/01 3:00 p.m.•33 views

CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

5.9CVSS5.9AI score0.03098EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/01 12:00 a.m.•3 views

CVE-2016-9963: Undefined Security Weakness

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

5.9CVSS7.8AI score0.03098EPSS
SaveExploits0References2
OSV
OSV
•added 2016/12/16 12:00 a.m.•13 views

UBUNTU-CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

5.9CVSS6.6AI score0.03098EPSS
SaveExploits0References5
FreeBSD
FreeBSD
•added 2016/12/15 12:00 a.m.•43 views

exim -- DKIM private key leak

The Exim project reports: Exim leaks the private DKIM signing key to the log files. Additionally, if the build option EXPERIMENTALDSNINFO=yes is used, the key material is included in the bounce message...

5.9CVSS1.7AI score0.03098EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2016/10/12 12:00 a.m.•18 views

VulnCheck KEV: CVE-2004-1653

The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS...

6.4CVSS7.4AI score0.11574EPSS
SaveIn wildExploits0References2
Openbugbounty
Openbugbounty
•added 2016/08/09 8:51 p.m.•12 views

onlywire.com Open Redirect vulnerability

Vulnerable URL: http://onlywire.com/bounce?t=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 38606 VIP website status:| Yes Check onlywire.com...

6.8AI score
SaveExploits0
hackapp
hackapp
•added 2016/04/01 10:00 a.m.•19 views

PAC-MAN Bounce - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application PAC-MAN Bounce published at the 'play' market has multiple vulnerabilities...

SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:46 a.m.•17 views

Bounce - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bounce published at the 'play' market has multiple vulnerabilities...

1AI score
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2015/10/30 9:17 a.m.•25 views

CVE-2004-1653

The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS...

6.4CVSS7AI score0.11574EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2015/05/11 12:00 a.m.•62 views

Filezilla FTP server bounce attack

DATA connection IP address is not restricted...

2.4AI score
SaveExploits0References1Affected Software1
myhack58
myhack58
•added 2014/10/28 12:00 a.m.•48 views

Drupal 7.31 SQL injection getshell exploit detailed and EXP-vulnerability warning-the black bar safety net

0x00 This vulnerability might indeed be great, and Drupal used more also, using Fuzzing to run the dictionary should be swept out of the many vulnerabilities of the host, but do the bulk may be on the other site cause a lot of loss, so I will just write a Exp is no longer deep down. 0x01 On the...

9AI score
SaveExploits0
NVD
NVD
•added 2014/09/22 10:55 a.m.•20 views

CVE-2014-6012

The Gravity Bounce aka net.toddm.gb application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
Prion
Prion
•added 2014/09/22 10:55 a.m.•16 views

Design/Logic Flaw

The Gravity Bounce aka net.toddm.gb application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2014/09/22 10:00 a.m.•40 views

CVE-2014-6012

The CVE-2014-6012 entry concerns the Gravity Bounce (net.toddm.gb) Android app version 1.1, which does not verify X.509 certificates from SSL servers. This weakness enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, impacting confident...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/09/22 10:00 a.m.•26 views

CVE-2014-6012

The Gravity Bounce aka net.toddm.gb application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00271EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/22 12:00 a.m.•4 views

CVE-2014-6012: Undefined Security Weakness

The Gravity Bounce aka net.toddm.gb application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2014/02/05 6:55 p.m.•6 views

CVE-2011-1594

A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the urlbounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to...

6.5CVSS6AI score0.01456EPSS
SaveExploits0References5
CVE
CVE
•added 2014/02/05 6:00 p.m.•83 views

CVE-2011-1594

CVE-2011-1594 is an Open Redirect in Spacewalk 1.6 used by Red Hat Network Satellite. The flaw allows remote attackers to redirect users to arbitrary sites via the url_bounce parameter, enabling phishing-like redirects. Multiple references (RHSA-2011:1299, SUSE CVE page) indicate an open‑redirect...

6.5CVSS6AI score0.01456EPSS
SaveExploits0References4Affected Software2
OpenVAS
OpenVAS
•added 2013/02/28 12:00 a.m.•12 views

Nmap NSE 6.01: ftp-bounce

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0
Rows per page
Query Builder