Microsoft Office SharePoint Server 2016 - Denial of Service (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sharepoint-ruby' class MetasploitModule 'DOS Vulnerability in SharePoint 2016 Server', 'Description' = %q A vulnerability in Microsoft SharePoint Server could...

The vulnerability of the Microsoft SharePoint Enterprise Server software, related to access control errors, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...

The vulnerability of the Microsoft SharePoint Enterprise Server software, related to access control errors, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...

The vulnerability of the Microsoft SharePoint Enterprise Server software, related to deficiencies in access control, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially crafted request...

Apache Superset 0.23 Remote Code Execution (CVE-2018-8021)

A remote code execution vulnerability exists in the Apache Superset web application. A remote attacker can exploit this vulnerability by sending a specially crafted request. Successful exploitation could lead to execute arbitrary code on the system...

The vulnerability of the readBytes function in the Android operating system, which allows a hacker to disclose protected information

The vulnerability of the readBytes function in the xltdecwbxml.c file of the Android operating system is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted request...

CVE-2018-15721

The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use this vulnerability to gain access to the local API...

CVE-2018-15721

The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use this vulnerability to gain access to the local API...

The vulnerability of the Windows operating system’s DNS server allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s DNS server is related to an overflow in the buffer in the “heap”. Exploitation of this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

Apache2 mod_http2 header Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of Apache HTTPD server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP2 headers. A crafted HTTP2 request can trigger a...

FreeBSD NFS Server Code Flaw Vulnerability (CNVD-2018-26669)

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project run by the Core Team, and is an important branch of Unix-like operating systems developed through BSD, 386BSD, and 4.4BSD.NFS server is one of the network file system servers. A security vulnerability exists in the NFS...

FreeBSD NFS Server Code Flaw Vulnerability

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project run by the Core Team, and is an important branch of Unix-like operating systems developed through BSD, 386BSD, and 4.4BSD.NFS server is one of the network file system servers. A security vulnerability exists in the NFS...

Apache HTTP Server Denial of Service Vulnerability (CNVD-2018-25796)

Apache HTTP Server is the United States Apache Apache Software Foundation, an open source web server. The server is fast, reliable and can be expanded through a simple API. A denial of service vulnerability exists in Apache HTTP Server. A remote attacker can exploit this vulnerability by sending ...

Buffalo TS5600D1206 Access Control Error Vulnerability (CNVD-2019-00673)

The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. An access control error vulnerability exists in the getportalinfo method in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by an attacker to determine sensitive device information by sending a...

Apache Spark Remote Code Execution Vulnerability

Apache Spark is a large-scale data processing engine that supports acyclic data streaming and in-memory computing from the Apache Software Foundation. A security vulnerability exists in Apache Spark. An attacker can exploit the vulnerability by sending a specially crafted request to execute code ...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-17190

In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execute user code. A specially-crafted request to the master can, however, cause the master to execute co...

KingView Vulnerability with Local Lift Vulnerabilities

KingView is the first industrial configuration software product launched by Beijing Asian Control Technology Company in China. A vulnerability exists in KingView that allows an attacker to submit a specially crafted request to execute arbitrary code in the context of the application. The...

CVE-2018-15708

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request...

Surreal ToDo 0.6.1.2 - Local File Inclusion

Surreal ToDo 0.6.1.2 - Local File Inclusion Exploit Title: Surreal ToDo 0.6.1.2 - Local File Inclusion Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: http://getsurreal.com/surrealtodo Software Link:...