Lucene search
+L

3296 matches found

Kitploit
Kitploit
•added 2021/07/04 12:30 p.m.•77 views

FRIDA-DEXDump - Fast Search And Dump Dex On Memory

Features 1. support fuzzy search broken header dex. 2. fix struct data of dex-header. 3. compatible with all android versionfrida supported. 4. support loading as objection plugin 5. pypi package has been released Requires frida: pip install frida optional click pip install click Installation Fro...

7.4AI score
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2021/06/17 3:56 p.m.•13 views

1-click-bom (>=1.3.0, <=1.3.1), 25uikit (>=1.2.7, <=1.2.10) +3197 more potentially affected by CVE-2021-32014 via xlsx (>=0.3.10, <=0.16.9)

xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =0.1.0, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook 0.0.1 and more Source cves: CVE-2021-32014 Source advisory: SNYK:JS-XLSX-1311139...

5.5CVSS6.3AI score0.0088EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/06/15 12:00 a.m.•39 views

CLICK PLC CPU Modules 授权问题漏洞

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to 8 I/O modules to expand the amount of system I/O and meet the needs of a specific application. A security vulnerability exists in Automation Direct CLICK PLC CPU Modules that stems fr...

9.8CVSS8.1AI score0.01113EPSS
SaveExploits0References6
ICS
ICS
•added 2021/06/15 12:00 a.m.•164 views

Automation Direct CLICK PLC CPU Modules

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Automation Direct Equipment: CLICK PLC CPU modules Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Cleartext Transmission of Sensitive Information, Unprotected Storage of...

9.8CVSS9.6AI score0.01113EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2021/06/10 12:00 a.m.•32 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jun 2021)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

8.8CVSS7.5AI score0.13337EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•24 views

SUSE: Security Advisory (SUSE-SU-2013:0325-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS6.7AI score0.03248EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•24 views

SUSE: Security Advisory (SUSE-SU-2013:0326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS6.6AI score0.03248EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/06/03 8:15 p.m.•18 views

CVE-2021-22337

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data...

5.3CVSS5.8AI score0.00657EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/03 8:15 p.m.•42 views

CVE-2021-22337

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data...

5.3CVSS0.00657EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/03 8:15 p.m.•12 views

CVE-2021-22337

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data...

5.3CVSS6AI score0.00657EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/03 12:00 a.m.•20 views

HuaWei 华为智能手机安全漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI has an information leakage vulnerability that can be exploited by attackers to cause a single-click data leak to users...

5.3CVSS5.9AI score0.00657EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/03 12:00 a.m.•10 views

CVE-2021-22337: Undefined Security Weakness

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data...

5.3CVSS5.8AI score0.00657EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/03 12:00 a.m.•5 views

PT-2021-14971

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to an Information Disclosure problem. It may lead to the leaking of user click data if successfully exploited. Recommendations: At the moment, there is no...

5.3CVSS0.00657EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/01 12:00 a.m.•8 views

CVE-2021-24334: Improper Neutralization of Input During Web Page Generation

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplashdownloadw and unsplashdownloadh parameter settings /wp-admin/upload.php?page=instant-images, only validating them client side before saving them, leading to a Stored...

5.4CVSS5.8AI score0.00659EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/06/01 12:00 a.m.•2 views

PT-2021-3638

Name of the Vulnerable Software and Affected Versions Instant Images – One Click Unsplash Uploads WordPress plugin versions prior to 4.4.0.1 Description The issue is related to the improper validation and sanitization of the unsplash download w and unsplash download h parameter settings in the...

7CVSS0.00659EPSS
SaveExploits2References7
osv_cve
osv_cve
•added 2021/05/14 12:15 p.m.•19 views

CVE-2021-24188

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...

8.8CVSS5.9AI score0.01325EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2021/05/14 12:00 a.m.•22 views

PT-2021-15734 · WordPress · Wp Content Copy Protection & No Right Click

Name of the Vulnerable Software and Affected Versions: WP Content Copy Protection & No Right Click WordPress plugin versions prior to 3.1.5 Description: The issue allows low-privileged users to exploit the AJAX action 'cp plugins do button job later callback' to install any plugin, including...

8.8CVSS8.6AI score0.01325EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/14 12:00 a.m.•7 views

CVE-2021-24188: Improper Authorization

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...

8.8CVSS6AI score0.01325EPSS
SaveExploits2References2
Schneier on Security
Schneier on Security
•added 2021/05/04 2:41 p.m.•43 views

Tesla Remotely Hacked from a Drone

This is an impressive hack: Security researchers Ralf-Philipp Weinmann of Kunnamon, Inc. and Benedikt Schmotzle of Comsecuris GmbH have found remote zero-click security vulnerabilities in an open-source software component ConnMan used in Tesla automobiles that allowed them to compromise parked ca...

2AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2021/04/30 7:24 a.m.•49 views

Passwordstate Warns of Ongoing Phishing Attacks Following Data Breach

Click Studios, the Australian software firm which confirmed a supply chain attack affecting its Passwordstate password management application, has warned customers of an ongoing phishing attack by an unknown threat actor. "We have been advised a bad actor has commenced a phishing attack with a...

1.4AI score
SaveExploits0
Rows per page
Query Builder