Lucene search
+L

27 matches found

OSV
OSV
added 2021/12/14 8:15 p.m.5 views

CVE-2021-43051

The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with network access to execute internal API operations outside of the scope of thos...

6.8CVSS6.7AI score0.00823EPSS
SaveExploits0References2
Huntr
Huntr
added 2021/09/09 6:40 a.m.11 views

Improper Access Control in agentejo/cockpit

✍️ Description A local file inclusion vulnerability allows attackers to bypass the need for API Keys when querying private custom API endpoints 🕵️‍♂️ Proof of Concept 1. On the server create a custom API endpoint in /var/www/html/config/api/custom.php as follows: param'test'; if !$test return...

1.3AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.9 views

The vulnerability relates to the set of own API interfaces of the Windows Runtime operating systems developed by Microsoft. This vulnerability allows a perpetrator to increase their privileges.

The vulnerability related to the collection of custom API interfaces in Microsoft Windows Runtime operating systems stems from improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS6.9AI score0.0332EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.13 views

The vulnerability relates to the set of own API interfaces of the Windows Runtime operating systems developed by Microsoft. This vulnerability allows a perpetrator to increase their privileges.

The vulnerability related to the collection of custom API interfaces in Microsoft Windows Runtime operating systems stems from improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00702EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/08/06 8:0 p.m.36 views

CVE-2019-5681

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden, which may lead to code execution, denial of service, or information disclosure...

7.5AI score0.00457EPSS
SaveExploits0References1
zdt
zdt
added 2010/06/06 12:0 a.m.49 views

reVou twitter clne Beta 2.0 XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= reVou twitter clne Beta 2.0 XSS / SQL Injection Vulnerability ============================================================= Title:reVou twitter clne Beta 2.0 sqli and Xss...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2010/06/06 12:0 a.m.35 views

ReVou Twitter Clone 2.0 Beta - SQL Injection Cross-Site Scripting

ReVou Twitter Clone 2.0 Beta - SQL Injection Cross-Site Scripting Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability Author: Sid3^effects Published: 2010-06-06 price:$99 email:[email protected] vendor: Revou url : http://www.revou.com/demo/home ooooo .oooooo. oooooo oooooo oooo 888' d8...

8.1AI score
SaveExploits0
Rows per page
Query Builder