Lucene search
K

8 matches found

Prion
Prion
added 2023/04/11 3:15 p.m.7 views

Design/Logic Flaw

An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the keywifisafenetcheckurl, KEYCirusscanwhitelist and KEYADNEWUSERAVOIDTIME parameters...

7.5CVSS8.9AI score0.00461EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/27 8:46 p.m.12 views

CVE-2023-28640 Permissions bypass in Apiman could enable authenticated attacker to unpermitted API Key

Apiman is a flexible and open source API Management platform. Due to a missing permissions check, an attacker with an authenticated Apiman Manager account may be able to gain access to API keys they do not have permission for if they correctly guess the URL, which includes Organisation ID, Client...

6.4CVSS6.6AI score0.00133EPSS
Exploits0References2
OSV
OSV
added 2019/07/11 3:15 p.m.1 views

CVE-2019-13561

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the onlinefirmwarecheck.cgi checkfwurl parameter...

9.8CVSS7.6AI score
Exploits0References3
Github Security Blog
Github Security Blog
added 2019/01/14 4:19 p.m.26 views

privacyIDEA Improper Input Validation vulnerability

privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=&pass= to /validate/check url. This vulnerability appears to have been fixed in...

7.5CVSS7.5AI score0.00334EPSS
Exploits1References5Affected Software1
Prion
Prion
added 2018/10/08 3:29 p.m.7 views

Input validation

privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=&pass= to /validate/check url. This vulnerability appears to have been fixed in...

5CVSS7.5AI score0.00334EPSS
Exploits1References2Affected Software1
Packet Storm
Packet Storm
added 2014/12/14 12:0 a.m.25 views

WordPress Download Manager 2.7.4 Remote Command Execution

!/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html Exploit written by Claudio Viviani 2014-12-03: Discovered...

0.4AI score
Exploits0
Packet Storm
Packet Storm
added 2014/11/17 12:0 a.m.28 views

Joomla HD FLV 2.1.0.1 Arbitrary File Download

!/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/...

0.2AI score
Exploits0
OpenVAS
OpenVAS
added 2009/02/17 12:0 a.m.25 views

Fedora Update for WebKit FEDORA-2008-3415

Check for the Version of WebKit OpenVAS Vulnerability Test Fedora Update for WebKit FEDORA-2008-3415 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

6.8CVSS0.3AI score0.0672EPSS
Exploits2References2
Rows per page
Query Builder