Lucene search
K

7991 matches found

Hacker One
Hacker One
added 2016/09/28 3:13 a.m.27 views

Reverb.com: Possible Blind Writing to S3 Bucket

Hi All, I noticed that you are using S3 and I believe I may have found one of your buckets and am able to write to it. However, I can not list the files in the bucket and such can not be 100% sure you own it. If you don't, I'd really appreciate being able to close this report myself or have you...

0.5AI score
Exploits0
ArchLinux
ArchLinux
added 2016/09/26 12:0 a.m.36 views

[ASA-201609-27] wireshark-cli: denial of service

Arch Linux Security Advisory ASA-201609-27 ========================================== Severity: Medium Date : 2016-09-26 CVE-ID : CVE-2016-7175 CVE-2016-7176 CVE-2016-7177 CVE-2016-7178 CVE-2016-7179 CVE-2016-7180 Package : wireshark-cli Type : denial of service Remote : Yes Link :...

5.9CVSS0.5AI score0.02652EPSS
Exploits0References13
Mageia
Mageia
added 2016/09/21 8:38 p.m.42 views

Updated nodejs packages fix security vulnerability

Under certain conditions, V8 may improperly expand memory allocations in the Zone::New function. This could potentially be used to cause a Denial of Service via buffer overflow or as a trigger for a remote code execution CVE-2016-1669. The primary npm registry has used HTTP bearer tokens to...

9.3CVSS2.9AI score0.04168EPSS
Exploits0References6
NVD
NVD
added 2016/09/21 2:25 p.m.15 views

CVE-2016-5017

Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command string...

8.1CVSS8.2AI score0.07821EPSS
Exploits1References12
Prion
Prion
added 2016/09/21 2:25 p.m.24 views

Buffer overflow

Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command string...

6.8CVSS7.6AI score0.07821EPSS
Exploits1References12Affected Software1
Debian CVE
Debian CVE
added 2016/09/21 2:0 p.m.33 views

CVE-2016-5017

Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command string...

8.1CVSS6.6AI score0.07821EPSS
Exploits1
CNVD
CNVD
added 2016/09/21 12:0 a.m.6 views

Apache Zookeeper Buffer Overflow Vulnerability

Apache Zookeeper is a software project of the U.S. Apache Apache Software Foundation, which can provide open source distributed configuration services, synchronization services, and naming registry for large-scale distributed computing. A buffer overflow vulnerability exists in the C cli shell in...

8.1CVSS9.4AI score0.07821EPSS
Exploits1References1
CNVD
CNVD
added 2016/09/19 12:0 a.m.3 views

Cisco Unified Computing System Local Elevation of Privilege Vulnerability

Cisco Unified Computing System Manager provides unified, embedded management of all hardware and software components within a unified computing system. An elevation of privilege vulnerability exists in Cisco Unified Computing System UCS versions prior to 3.02d in UCS Manager and UCS 6200 Fabric...

7.8CVSS7AI score0.0036EPSS
Exploits0References1
Cisco
Cisco
added 2016/09/14 4:0 p.m.28 views

Cisco Unified Computing System Command Line Interface Privilege Escalation Vulnerability

A vulnerability in the command-line interface CLI of the Cisco Unified Computing System UCS Manager and UCS 6200 Series Fabric Interconnects could allow an authenticated, local attacker to access the underlying operating system with the privileges of the root user. The vulnerability is due to...

6.8CVSS7.6AI score0.0036EPSS
Exploits0References1
Kitploit
Kitploit
added 2016/09/14 2:38 p.m.24 views

Cartero - Social Engineering Framework

A robust Phishing Framework with a full featured CLI interface. The project was born out necessity through of years of engagements with tools that just didn't do the job. Even though there are many projects out there, we were not able to find a suitable solution that gave us both easy of use and...

6.6AI score
Exploits0References1
OSV
OSV
added 2016/08/31 5:34 p.m.8 views

MGASA-2016-0295 Updated redis packages fix security vulnerability

It was discovered that redis did not properly protect redis-cli history files; they were created by default with world-readable permissions CVE-2013-7458...

3.3CVSS4.2AI score0.00488EPSS
Exploits0References3
OSV
OSV
added 2016/08/26 7:59 p.m.2 views

CVE-2016-5662

Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors...

7.8CVSS5.8AI score0.00383EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2016/08/23 12:0 a.m.36 views

VideoIQ Camera Remote File Disclosure

"cli" die$error0; if$argc "; echo"\nExample: php $argv0 localhost 8080"; die; ifisset$argv1 && isset$argv2 $host = $argv1; $port = $argv2; $pack = "GET /%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C..FILEPATH HTTP/1.0\r\n"; $pack.= "Host: $host\r\n"; $pack.= "Connection:...

0.3AI score
Exploits0
NVD
NVD
added 2016/08/22 10:59 a.m.22 views

CVE-2016-6362

Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725...

7.8CVSS7.8AI score0.00395EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/08/22 10:0 a.m.25 views

CVE-2016-6362

Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725...

7.8AI score0.00395EPSS
Exploits0References3
Prion
Prion
added 2016/08/18 6:59 p.m.20 views

Code injection

Cisco Adaptive Security Appliance ASA Software before 8.41 on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA...

6.8CVSS7.2AI score0.22583EPSS
Exploits2References7Affected Software1
Openbugbounty
Openbugbounty
added 2016/08/18 6:47 p.m.16 views

download.cli.co.jp XSS vulnerability

Vulnerable URL: http://download.cli.co.jp/v4/list.asp?lang=jpn=PowerDVD" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

6.3AI score
Exploits0
CVE
CVE
added 2016/08/18 6:0 p.m.876 views

CVE-2016-6367

The CVE-2016-6367 issue affects Cisco ASA Software on ASA 5500/5500-X, PIX, and FWSM where an authenticated, local attacker can trigger the CLI parser with invalid commands to gain privileges and potentially execute code or cause DoS. The root cause is improper handling of invalid CLI input in th...

7.8CVSS7.6AI score0.22583EPSS
In wildExploits2References8Affected Software1
Cvelist
Cvelist
added 2016/08/18 6:0 p.m.25 views

CVE-2016-6367

Cisco Adaptive Security Appliance ASA Software before 8.41 on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA...

7.8AI score0.22583EPSS
Exploits2References7
myhack58
myhack58
added 2016/08/18 12:0 a.m.35 views

Cisco repair Shadow Brokers announced the vulnerability and released technical analysis-vulnerability warning-the black bar safety net

A, event summary 2 0 1 6 years 8 on 1 5 December, a named“The Shadow Brokers”the shadow broker-hacking group claims to Own the intrusion of the Equation Group equation organization of hacking an organization's computer system, and successfully steal a lot of confidential information and hacker...

1.7AI score
Exploits0
Rows per page
Query Builder