Lucene search
+L

1000 matches found

OSV
OSV
added 2015/05/01 12:00 a.m.36 views

DLA-217-1 xdg-utils - security update

Bulletin has no description...

8.8CVSS8.5AI score0.03256EPSS
SaveExploits1
OSV
OSV
added 2015/02/28 2:59 a.m.10 views

DEBIAN-CVE-2015-0885

checkpw 1.02 and earlier allows remote attackers to cause a denial of service infinite loop via a -- dash dash in a username...

5CVSS6.3AI score0.02427EPSS
SaveExploits0References1
OSV
OSV
added 2015/02/28 2:59 a.m.8 views

UBUNTU-CVE-2015-0885

checkpw 1.02 and earlier allows remote attackers to cause a denial of service infinite loop via a -- dash dash in a username...

5CVSS5.8AI score0.02427EPSS
SaveExploits0References6
OSV
OSV
added 2015/01/07 7:26 p.m.21 views

USN-2455-1 bsd-mailx vulnerability

It was discovered that bsd-mailx contained a feature that allowed syntactically valid email addresses to be treated as shell commands. A remote attacker could possibly use this issue with a valid email address to execute arbitrary commands. This functionality has now been disabled by default, and...

7.8CVSS7.2AI score0.0155EPSS
SaveExploits0References2
NVD
NVD
added 2014/10/15 10:55 a.m.15 views

CVE-2014-6945

The Neeku Naaku Dash Dash aka com.dakshaa.nndd application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
added 2014/10/15 10:55 a.m.19 views

Information disclosure

The Neeku Naaku Dash Dash aka com.dakshaa.nndd application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2014/10/15 10:00 a.m.24 views

CVE-2014-6945

The Neeku Naaku Dash Dash aka com.dakshaa.nndd application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
added 2014/10/15 10:00 a.m.34 views

CVE-2014-6945

The CVE-2014-6945 entry concerns the Android app Neeku Naaku Dash Dash (com.dakshaa.nndd) version 1.0, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in SSL/TLS, enabling man-in-the-middle attackers to spoof servers and obtain sensitive infor...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.27 views

linux/x86 execve(/bin/dash) 42 bytes

No description provided by source. / linux/x86 execve/bin/dash 42 bytes Author : X-h4ck [email protected], [email protected] www.pirate.al , www.flashcrew.in Greetz : mywisdom - Danzel - Wulns - IllyrianWarrior- Ace - M4yh3m - Saldeath ev1lut1on - Lekosta - Pretorian - bi0 - Slimshaddy - d3trimentaL ...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2014/06/19 12:00 a.m.28 views

openSUSE Security Update : miniupnpc (openSUSE-SU-2014:0815-1)

miniupnpc was updated to 1.9 to fix a potential buffer overrun in miniwget.c CVE-2014-3985. Besides that the following issues were fixed : - added argument remoteHost to UPNPGetSpecificPortMappingEntry - increment APIVERSION to 10 - --help and -h arguments in upnpc.c - define MAXHOSTNAMELEN if no...

5CVSS5.7AI score0.03312EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2014/05/06 2:55 p.m.28 views

CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

4.4CVSS6AI score0.00513EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2014/05/06 2:00 p.m.32 views

CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

7.2AI score0.00513EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2014/05/05 12:00 a.m.17 views

Ubuntu Update for unity USN-2184-1

Check for the Version of unity OpenVAS Vulnerability Test $Id: gbubuntuUSN21841.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for unity USN-2184-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

7.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2014/05/01 12:00 a.m.14 views

Ubuntu 14.04 LTS : Unity vulnerabilities (USN-2184-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2184-2 advisory. USN-2184-1 fixed lock screen vulnerabilities in Unity. Further testing has uncovered more issues which have been fixed in this update. This update also fixes a...

5.6AI score
SaveExploits0References1
OSV
OSV
added 2014/04/30 6:31 p.m.10 views

USN-2184-2 unity vulnerabilities

USN-2184-1 fixed lock screen vulnerabilities in Unity. Further testing has uncovered more issues which have been fixed in this update. This update also fixes a regression with the shutdown dialogue. We apologize for the inconvenience. Original advisory details: Frédéric Bardy discovered that Unit...

5.8AI score
SaveExploits0References2
OSV
OSV
added 2014/04/29 12:01 p.m.10 views

USN-2184-1 unity vulnerabilities

Frédéric Bardy discovered that Unity incorrectly filtered keyboard shortcuts when the screen was locked. A local attacker could possibly use this issue to run commands, and unlock the current session. Giovanni Mellini discovered that Unity could display the Dash in certain conditions when the...

4.4CVSS5.8AI score0.00477EPSS
SaveExploits1References3
exploitpack
exploitpack
added 2013/08/22 12:00 a.m.22 views

VMware - Setuid VMware-mount Popen lsb_release Privilege Escalation

VMware - Setuid VMware-mount Popen lsbrelease Privilege Escalation // Source: http://blog.cmpxchg8b.com/2013/08/security-debianisms.html On most modern Linux systems, /bin/sh is provided by bash, which detects that it's being invoked as sh, and attempts to mimic traditional sh. As everyone who...

0.9AI score
SaveExploits0
ThreatPost
ThreatPost
added 2012/10/30 2:35 p.m.17 views

EFF Raises Questions on Privacy Leaks in Ubuntu

The EFF is warning users of Ubuntu’s latest release that the open-source operating system sends their search queries to third parties, including Amazon, by default, and that some of their search results may be viewable by other users on the same network. The privacy leaks are present in Ubuntu...

6.6AI score
SaveExploits0References4
zdt
zdt
added 2012/08/01 12:00 a.m.20 views

linux/x86 - execve(/bin/dash) - 49 bytes

/ Shellcode length: 49 Author: Chroniccommand /bin/dash My first attempt at shellcode Poison security / include //49 bytes char shellcode = "\xeb\x18\x5e\x31\xc0\x88\x46\x09\x89\x76\x0a" "\x89\x46\x0e\xb0\x0b\x89\xf3\x8d\x4e\x0a\x8d" "\x56\x0e\xcd\x80\xe8\xe3\xff\xff\xff\x2f"...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/16 12:00 a.m.48 views

linux/x86 execve/bin/dash 42 bytes

linux/x86 execve/bin/dash 42 bytes. Shellcode exploit for linux platform / linux/x86 execve/bin/dash 42 bytes Author : X-h4ck [email protected], [email protected] www.pirate.al , www.flashcrew.in Greetz : mywisdom - Danzel - Wulns - IllyrianWarrior- Ace - M4yh3m - Saldeath ev1lut1on - Lekosta -...

SaveExploits0
Rows per page
Query Builder