Lucene search
+L

69 matches found

BDU FSTEC
BDU FSTEC
added 2015/11/05 12:0 a.m.10 views

The vulnerability of the web application for data synchronization with ownCloud allows a attacker to execute arbitrary SMB commands.

The vulnerability of the driver for the external SMB storage device used by web applications for data synchronization with ownCloud exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a maliciou...

9CVSS5.9AI score0.03043EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/11/05 12:0 a.m.10 views

The vulnerability of the web application for data synchronization with ownCloud allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the web application for data synchronization with ownCloud exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using special symbols within the file name...

3.5CVSS5.6AI score0.00826EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/11/05 12:0 a.m.9 views

The vulnerability of the web application for data synchronization with ownCloud allows a hacker to circumvent existing access restrictions and gain access to users’ files.

The vulnerability of the virtual file system of the web application for data synchronization with ownCloud is related to the lack of data validation during data retrieval. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and gain access to user files b...

4CVSS5.5AI score0.01201EPSS
SaveExploits0References4Affected Software1
Kitploit
Kitploit
added 2015/11/04 4:39 p.m.16 views

Tails 1.7 - The Amnesic Incognito Live System

Tails is a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity , and helps you to: use the Internet anonymously and circumvent censorship ; all connections to the Internet are forced to go through the...

7.3AI score
SaveExploits0
n0where
n0where
added 2015/09/06 7:25 p.m.30 views

Decentralized P2P Websites: ZeroNet

Decentralized P2P websites using Bitcoin crypto and the BitTorrent network ZeroNet uses Bitcoin cryptography and BitTorrent technology to build a decentralized censorship-resistant network. Users can publish static or dynamic websites into ZeroNet and visitors can choose to also serve the website...

SaveExploits0References5
Kitploit
Kitploit
added 2013/08/14 4:40 a.m.17 views

[MISP v2.1] Malware Information Sharing Platform

The problem that we experienced in the past was the difficulty to exchange information about targeted malwares and attacks within a group of trusted partners, or a bilateral agreement. Even today much of the information exchange happens in unstructured reports where you have to copy-paste the...

6.8AI score
SaveExploits0References1
Cvelist
Cvelist
added 2012/06/27 12:0 a.m.23 views

CVE-2012-2727

Open redirect vulnerability in the Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when synchronizing user data, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter...

6.7AI score0.02345EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2008/04/01 12:0 a.m.26 views

MobiLink Server Detection

The remote service is a MobiLink server, a component of the Sybase SQL Anywhere package used for two-way data synchronization. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31718; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

5.5AI score
SaveExploits0References1
seebug.org
seebug.org
added 2008/02/22 12:0 a.m.19 views

Sybase MobiLink远程堆溢出漏洞

BUGTRAQ ID: 27914 Sybase mobilink是用于实现两个数据库之间数据同步的服务器。 MobiLink服务器在处理超长的请求数据时存在缓冲区溢出漏洞,远程攻击者可能利用此漏洞控制服务器。 MobiLink服务器在处理用户名、版本和远程ID等字符串时存在堆溢出漏洞。如果远程攻击者在预认证期间向服务器提交了超过128字节的字符串的话,就可能触发这个溢出,导致执行任意指令。 Sybase MobiLink = 10.0.1.3629 厂商补丁: Sybase ------ 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...

6.9AI score
SaveExploits0
Rows per page
Query Builder