Lucene search
+L

745 matches found

Kitploit
Kitploit
•added 2015/01/27 9:51 p.m.•33 views

SmartSniff v2.16 - Capture TCP/IP packets on your network adapter

SmartSniff is a network monitoring utility that allows you to capture TCP/IP packets that pass through your network adapter, and view the captured data as sequence of conversations between clients and servers. You can view the TCP/IP conversations in Ascii mode for text-based protocols, like HTTP...

7AI score
SaveExploits0
Fedora
Fedora
•added 2014/11/19 4:00 p.m.•33 views

[SECURITY] Fedora 20 Update: geary-0.6.3-1.fc20

Geary is a new email reader for GNOME designed to let you read your email quickly and effortlessly. Its interface is based on conversations, so you can easily read an entire discussion without having to click from message to message. Geary is still in early development and has limited features...

4.3CVSS1.8AI score0.01093EPSS
SaveExploits0
NVD
NVD
•added 2014/05/20 11:13 a.m.•28 views

CVE-2014-2193

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084...

4.3CVSS6.6AI score0.00958EPSS
SaveExploits0References1
Prion
Prion
•added 2014/05/20 11:13 a.m.•33 views

Design/Logic Flaw

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084...

4.3CVSS7.2AI score0.00958EPSS
SaveExploits0References1
CVE
CVE
•added 2014/05/20 10:00 a.m.•68 views

CVE-2014-2193

CVE-2014-2193 affects Cisco Unified Web and E-Mail Interaction Manager. Root cause: improper use of session identifiers in GET requests, enabling a remote attacker to inject conversation text by obtaining a valid session identifier. Affected products and impact are described in Cisco advisory and...

4.3CVSS6.8AI score0.00958EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2014/05/20 12:00 a.m.•3 views

PT-2014-4547

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager affected versions not specified Description The issue allows remote attackers to inject conversation text by obtaining a valid session identifier, which is placed in GET requests. Recommendation...

4.3CVSS0.00958EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/20 12:00 a.m.•8 views

CVE-2014-2193: Improper Input Validation

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084...

4.3CVSS5.9AI score0.00958EPSS
SaveExploits0References2
OSV
OSV
•added 2014/04/24 10:55 a.m.•14 views

CVE-2014-2907

The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service application crash via a crafted packet...

6.3AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2014/04/24 10:00 a.m.•71 views

CVE-2014-2907

The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service application crash via a crafted packet...

4.3CVSS5AI score0.02094EPSS
SaveExploits1
Kitploit
Kitploit
•added 2013/12/18 12:34 a.m.•35 views

[Cryptocat] Chat Client with encrypted conversations on iPhone and Android

Cryptocat is an experimental browser-based chat client for easy to use, encrypted conversations. It aims to make encrypted, private chat easy to use and accessible. We want to break down the barrier that prevents the general public from having an accessible privacy alternative that they already...

7.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2013/03/27 12:28 a.m.•28 views

[HoneyProxy] A man-in-the-middle SSL Proxy & Traffic Analyzer

HoneyProxy is a lightweight tool that allows live HTTPS traffic inspection and analysis. It focuses on features that are useful for malware analysis and network forensics. Features Analyze HTTPS traffic on the fly Filter and highlight traffic, regex support included. Report Generation for saved...

7.3AI score
SaveExploits0References2
OSV
OSV
•added 2012/11/23 8:55 p.m.•11 views

DEBIAN-CVE-2012-2086

SQL injection vulnerability in the getlastconversationlines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter...

7.5CVSS8.8AI score0.02403EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2012/11/23 12:00 a.m.•5 views

PT-2012-3798

Name of the Vulnerable Software and Affected Versions Gajim versions prior to 0.15 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the jig parameter in the get last conversation lines function located in common/logger.py. Recommendations For...

7.5CVSS0.02403EPSS
SaveExploits1References12
The Hacker News
The Hacker News
•added 2012/06/20 3:57 p.m.•11 views

Hacker charged for hacking into U.S. Energy Department

Hacker charged for hacking into U.S. Energy Department Andrew James Miller, a 23-year-old resident of Devon, Pennsylvania, was arrested on Thursday and charged with one count of conspiracy, two counts of computer fraud, and one count of access device fraud, according to a statement issued by the...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2012/06/20 12:00 a.m.•24 views

WordPress Nmedia Member Conversation Plugin Arbitrary File Upload Vulnerability

WordPress Nmedia Member Conversation Plugin is prone to file upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.7AI score0.13647EPSS
SaveExploits2References6
NVD
NVD
•added 2012/06/17 3:41 a.m.•25 views

CVE-2012-3577

Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

7.5CVSS7.7AI score0.13647EPSS
SaveExploits2References6
Prion
Prion
•added 2012/06/17 3:41 a.m.•20 views

Unrestricted file upload

Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

7.5CVSS8.3AI score0.13647EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
•added 2012/06/17 1:00 a.m.•38 views

CVE-2012-3577

Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

7.7AI score0.13647EPSS
SaveExploits2References6
CVE
CVE
•added 2012/06/17 1:00 a.m.•86 views

CVE-2012-3577

The CVE-2012-3577 issue affects the WordPress N‑Media Member Conversation plugin prior to version 1.4. It is an unrestricted file upload in doupload.php that lets remote attackers upload a file with an executable extension and access it at wp-content/uploads/user_uploads, enabling arbitrary code ...

7.5CVSS6.7AI score0.13647EPSS
SaveExploits2References6Affected Software1
Positive Technologies
Positive Technologies
•added 2012/06/17 12:00 a.m.•5 views

PT-2012-4823

Name of the Vulnerable Software and Affected Versions Nmedia Member Conversation plugin versions prior to 1.4 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the doupload.php file, and then accessing it via a direct reque...

7.5CVSS0.13647EPSS
SaveExploits2References9
Rows per page
Query Builder