6452 matches found
IP-Tools 2.5 - Local Buffer Overflow (SEH) (Egghunter) Exploit
Exploit for windows platform in category local exploits !/usr/bin/env python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: IP-Tools 2.5 - Local Buffer OverflowEggHunter Date: 2019-02-06 Author: Juan...
CVE-2019-7673
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format...
The vulnerability in the code of the Mutt and NeoMutt email clients allows a hacker to gain unauthorized access to protected information.
The vulnerability in the code of the Mutt and NeoMutt email clients lies in the absence of a prohibition for “unsafe” characters such as the slash character “/” in path names to cached messages. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information throu...
Security update for python-python-gnupg (important)
openSUSE Security Update: Security update for python-python-gnupg Announcement ID: openSUSE-SU-2019:0143-1 Rating: important References: 1123498 Cross-References: CVE-2019-6690 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update...
Cross site scripting
A XSS vulnerability was found in module m-server 1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names...
CVE-2018-16484
A XSS vulnerability was found in module m-server 1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names...
CVE-2019-7216
An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php...
(0Day) Wecon LeviStudioU fontlib Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Wecon LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the FontLib.dl...
DEBIAN-CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
The vulnerability of the IIoT Monitor platform, related to the lack of special character filtering, allows attackers to access areas beyond the restricted catalog.
The vulnerability of the IIoT Monitor platform lies in the lack of filtering for specific symbols. Exploiting this vulnerability could allow a malicious actor to access data beyond the limited access scope of the catalog...
Cacti cross-site scripting vulnerability (CNVD-2019-14551)
Cacti is an open source, web-based network monitoring and mapping tool, a front-end application designed for the data logging tool RRDtool. A cross-site scripting vulnerability exists in the 'Vertical Label' field of the graphtemplates.php file in versions of Cacti prior to 1.2.0, which stems fro...
Cross site scripting
A cross-site scripting XSS vulnerability exists in colortemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color...
UBUNTU-CVE-2018-20725
A cross-site scripting XSS vulnerability exists in graphtemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label...
Cross site scripting
A cross-site scripting XSS vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors...
CVE-2018-20723
A cross-site scripting XSS vulnerability exists in colortemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color...
[SECURITY] Fedora 28 Update: unrtf-0.21.9-8.fc28
UnRTF is a command-line program written in C which converts documents in Rich Text Format .rtf to HTML, LaTeX, troff macros, and RTF itself. Converting to HTML, it supports a number of features of Rich Text Format: Changes in the text's font, size, weight bold, and slant italic Underlines and...
Remote Code Execution (RCE)
mutt is vulnerable to remote code execution RCE attacks. The vulnerability exists as an issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with...
Denial Of Service (DoS)
glibc is vulnerable to denial of service DoS attacks. The vulnerability exists through a buffer overflow issue in the extendbuffers function in the regular expression matcher posix/regexec.c in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service memor...
