PT-2018-18251

Name of the Vulnerable Software and Affected Versions: Eramba version 1.0.6.033 Description: The issue is related to Reflected XSS in the Date Filter. This occurs via the created parameter to the "/crons" URI. Recommendations: For Eramba version 1.0.6.033, avoid using the created parameter in the...

tr.wikiloc.com XSS vulnerability

Open Bug Bounty ID: OBB-533694 Description| Value ---|--- Affected Website:| tr.wikiloc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Unspecified Vulnerability in IBM MQ Managed File Transfer Agent

IBM MQ Managed File Transfer Agent is a suite of file transfer software from IBM in the United States. The software transfers files between systems in an auditable manner. A security vulnerability exists in IBM MQ Managed File Transfer Agent that arises from the program setting insecure permissio...

CVE-2017-3106

creationtimestamp| type| source ---|---|--- 2017-08-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42480...

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

VX Search Enterprise 9.7.18 - Local Buffer Overflow

VX Search Enterprise 9.7.18 - Local Buffer Overflow import os import struct author = ''' Created: ScrR1pTK1dd13 Name: Greg Priest Mail: [email protected] Exploit Title: VX Search Enterprise v9.7.18 Import Local Buffer Overflow Vuln. Date: 2017.06.15 Exploit Author: Greg Priest Versio...

The vulnerability of the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the Kernel component of the Mac OS X operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

CVE-2017-2473

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41792...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the kernel control driver in the Windows transaction monitor is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a perpetrator to disclose protected information

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a local attacker to disclose sensitive information through a specially created application...

libenom - Make Fast and Easy Payloads with MSFvenom

Libenom is a tool created for make more easy and fast the creation of payloads with MSFvenom and get all the data generated ordered. Requirements A linux distribution for pentesting or Ubuntu, Debian, Mint Recommended Kali Linux 2.0 sana or 2016.1 rolling, Parrot OS, Blackarch, Dracos ,Lionsec...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the network component of the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain confidential information through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm ARM operating system Android is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to enhance their privileges through a specially created application...

CVE-2016-1209

creationtimestamp| type| source ---|---|--- 2016-05-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41692 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wpninjaformsunauthenticatedfileupload.rb 2025-02-06...

The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information through a specially created...

CVE-2016-3134

creationtimestamp| type| source ---|---|--- 2016-03-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39545...

chromium-browser: use-after-free in Blink

extensions/renderer/renderframeobservernatives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecifie...

Customer can see Internal Comment created by Automation Action

h5. Environment - run JIRA from atlas-debug - JIRA 7.0.5 - JIRA Service Desk 3.0.5 h5. Steps to reproduce Create Service Desk project go to Administration - Automation tab click New rule - Custom rule add Trigger Issue Created add Action Add comment put some Comment text and select Internal as...

Customer can see Internal Comment created by Automation Action

h5. Environment - run JIRA from atlas-debug - JIRA 7.0.5 - JIRA Service Desk 3.0.5 h5. Steps to reproduce Create Service Desk project go to Administration - Automation tab click New rule - Custom rule add Trigger Issue Created add Action Add comment put some Comment text and select Internal as...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to the handling of objects in memory. Exploiting this vulnerability can allow a local attacker to increase their privileges through a specially created application...