Lucene search
K

2563 matches found

Kitploit
Kitploit
added 2018/09/18 9:3 p.m.160 views

Leaked? 2.0 - A Checking Tool For Hash Codes, Passwords And Emails Leaked

Leaked? is A Checking tool for Hash codes and Passwords and Emails leaked, uses leakz module from Aidan Holland, and leakz module uses API from Aurelius Wendelken. Leaked? can work in any OS if they have support Python 3 and 2. What's new? Check email leaked Update More friendly for users Support...

7.5AI score
Exploits0References1
CNVD
CNVD
added 2018/09/10 12:0 a.m.1 views

Guangdong Provincial Transportation Group Limited Guangdong Expressway APP has information leakage vulnerability

Guangdong Expressway app is a mobile application for highway traffic information service launched by Guangdong Provincial Transportation Group Company Limited Highway Monitoring Center for the public. There is an information leakage vulnerability in Guangdong Expressway App of Guangdong Provincia...

6.9AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/09/09 9:38 a.m.6 views

bank-swift-codes.com XSS vulnerability

Open Bug Bounty ID: OBB-674547 Description| Value ---|--- Affected Website:| bank-swift-codes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
OSV
OSV
added 2018/08/30 5:29 p.m.2 views

CVE-2018-15478

An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The process of registering a device with a cloud account was based o...

8.1CVSS5.8AI score0.00859EPSS
Exploits0References1
Hacker One
Hacker One
added 2018/08/30 2:29 a.m.31 views

X (Formerly Twitter): HTTPS is not validating TLS mac codes

https://twitterflightschool.com is prone to POODLE and also a stronger variant of POODLE which allows a MITM attacker to actively decrypt bytes from an HTTPS request. This attack is possible because the device terminating this TLS connection responds differently to a bad record mac when the last...

5.8AI score
Exploits0
Veeam
Veeam
added 2018/08/22 12:0 a.m.20 views

Backing Up Hyper-V Guest Cluster Based on VHD Set

Challenge VHD Set is a new shared Virtual Disk model for guest clusters in Windows Server 2016 and later. VHD Set files can be included in application-consistent checkpoints and backed up, but there are some limitations. Cause Please make sure the following requirements are met: Each guest VM...

5.8AI score
Exploits0
CNVD
CNVD
added 2018/08/18 12:0 a.m.1 views

Casual Borrowing Loan App Has Logic Flaw Vulnerability

Casual Loan App is a professional mobile loan software for quick loans. Casual Loan APP has a logic flaw vulnerability, attackers can use packet grabbing tools to blast the verification code in the packet and utilize the vulnerability to cause information leakage...

6.9AI score
Exploits0
Packet Storm
Packet Storm
added 2018/08/14 12:0 a.m.41 views

cPanel 76 Cross Site Scripting

Title: cPanel Filename Based Stored XSS http://ip:2082/cpsessXXXXXXXXXX/frontend/THEME/raw/index.html '; else die'An error occured.'; else echo 'Enter your payload: " "'; // end of the script. ? Note: You cant create a file as named with / slash character by this exploit. This vulnerability is...

0.2AI score
Exploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2018/08/03 6:47 a.m.57 views

COSCO incident. Phishing frenzy and exploding goods?

If you haven’t seen the coverage, COSCO the world’s 4th largest shipping line has had a ransomware outbreak. Sounds terribly familiar, doesn’t it. One wonders why on earth they didn’t carry out a thorough review after the Maersk incident, so as to be rather better prepared. Phishing time Breaches...

6.9AI score
Exploits0
NVD
NVD
added 2018/08/02 6:29 p.m.19 views

CVE-2018-10921

Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls...

7.5CVSS6.2AI score0.01039EPSS
Exploits1References2
Prion
Prion
added 2018/08/02 6:29 p.m.14 views

Integer overflow

Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls...

5CVSS7.7AI score0.01039EPSS
Exploits1References2
Cvelist
Cvelist
added 2018/08/02 6:0 p.m.19 views

CVE-2018-10921

Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls...

4.3CVSS7.8AI score0.01039EPSS
Exploits1References2
Vulnerability Lab
Vulnerability Lab
added 2018/07/19 12:0 a.m.707 views

Adobe Systems - Arbitrary Code Injection Vulnerability

Document Title: =============== Adobe Systems - Arbitrary Code Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2120 PSIRT ID: 7873 Vulnerability Magazine:...

0.7AI score
Exploits0
CNVD
CNVD
added 2018/07/03 12:0 a.m.1 views

ECOS System Management Appliance Spoofing Vulnerability

ECOS System Management Appliance a.k.a. SMA is a virtual appliance from ECOS TECHNOLOGY, Germany, for centralized management of ECOS products, which is capable of running on VMware, Crtrix XenServer, and Hyper-V. A security vulnerability exists in ECOS SMA version 5.2.68. An attacker can exploit...

7.4CVSS7.4AI score0.00949EPSS
Exploits0References1
NVD
NVD
added 2018/06/29 2:29 p.m.29 views

CVE-2018-13001

An XSS issue was discovered in Sandoba CP:Shop v2016.1. The vulnerability is located in the admin.php file of the ./cpshop/ module. Remote attackers are able to inject their own script codes to the client-side requested vulnerable web-application parameters. The attack vector of the vulnerability...

6.1CVSS6.2AI score0.00813EPSS
Exploits3References1
OSV
OSV
added 2018/06/17 4:29 p.m.2 views

CVE-2018-10969

SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute arbitrary SQL commands via the invitation codes grid...

9.8CVSS6.1AI score0.0533EPSS
Exploits5References2
Cvelist
Cvelist
added 2018/06/17 4:0 p.m.28 views

CVE-2018-10969

SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute arbitrary SQL commands via the invitation codes grid...

10AI score0.0533EPSS
Exploits5References2
OSV
OSV
added 2018/06/11 9:29 p.m.0 views

DEBIAN-CVE-2017-5378

Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird 45.7, Firefox ESR 45....

7.5CVSS8.8AI score0.03399EPSS
Exploits1References1
NVD
NVD
added 2018/06/11 9:29 p.m.25 views

CVE-2017-5378

Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird 45.7, Firefox ESR 45....

7.5CVSS8.2AI score0.03399EPSS
Exploits1References13
Debian CVE
Debian CVE
added 2018/06/11 9:0 p.m.21 views

CVE-2017-5378

Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird 45.7, Firefox ESR 45....

7.5CVSS9.2AI score0.03399EPSS
Exploits1
Rows per page
Query Builder