897 matches found
CVE-2014-3120
creationtimestamp| type| source ---|---|--- 2014-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33370 2014-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33588 2014-10-20 06:04:12+00:00| seen| MISP/5444a4b6-a7b8-41f0-8f49-45c7950d210b 2018-05-29...
MGASA-2014-0160 Updated moodle packages fix multiple security vulnerabilities
Updated moodle package fixes security vulnerabilities: In Moodle before 2.4.9, question strings were not being filtered correctly possibly allowing cross site scripting, as quizquestiontostring can cause invalid HTML CVE-2014-2571. Feedback Availability dates not honored in complete.php in Moodle...
Sql injection
Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 newsid parameter to news/send.php, 2 threadid parameter to posts/edit.php, or 3 useremail parameter to users/password.php or 4 users/register.php. NOTE: these issues were SPLIT...
CVE-2013-5877
creationtimestamp| type| source ---|---|--- 2014-03-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31992 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/oracledemantrafileretrieval.rb 2025-02-06...
Adobe ColdFusion Unsupported Version Detection (credentialed check)
According to its version, the installation of Adobe ColdFusion running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network...
CVE-2013-3631
creationtimestamp| type| source ---|---|--- 2013-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29320 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/nas4freephpexec.rb 2025-02-06 03:13:41+00:00| seen|...
CVE-2013-2465
creationtimestamp| type| source ---|---|--- 2013-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27705 2013-09-05 07:51:03+00:00| seen| MISP/5228311f-08d0-42fd-86a4-3f1cac1d4fa4 2014-01-15 10:35:25+00:00| seen| MISP/52d6636d-b21c-468f-aa25-4b3c950d2109 2014-02-27...
CVE-2013-3248
creationtimestamp| type| source ---|---|--- 2013-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26805 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/corelpdffusionbof.rb 2025-02-06 03:13:41+00:0...
CVE-2013-4694
creationtimestamp| type| source ---|---|--- 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26558 2013-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27874...
Thousands of DHS Personnel Notified of Data Breach
The Department of Homeland Security this week began notifying up to tens of thousands of employees, contractors and others with a DHS security clearance that their personal data may be at risk. The notifications began on Monday, according to an online statement, after officials learned of a...
Scripps Reporters Accused of Hacking Lifeline Data Breach
Investigative reporters for the Scripps news service have been threatened with legal action after informing a telecommunications company that confidential data on tens of thousands of applicants was available on the Internet. The reporters were said to be looking into companies participating in...
CVE-2013-3660
creationtimestamp| type| source ---|---|--- 2013-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25611 2013-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25912 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26554 2015-05-28...
CVE-2013-3238
creationtimestamp| type| source ---|---|--- 2013-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25003 2013-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25136 2018-05-29 15:50:33+00:00| seen|...
CVE-2013-1493
creationtimestamp| type| source ---|---|--- 2013-03-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24904 2013-09-23 10:00:35+00:00| seen| MISP/523c662f-2958-4aaf-a65e-4005950d2109 2014-02-27 09:03:19+00:00| seen| MISP/530efe60-c084-4934-b3db-6e9aac1d4fa4 2014-05-24...
Fedora 18 : sudo-1.8.6p7-1.fc18 (2013-3297)
update to 1.8.6p7 - fixes CVE-2013-1775 and CVE-2013-1776 - fixed several packaging issues thanks to ville.skytta at iki.fi - build with system zlib. - let rpmbuild strip libexecdir/.so. - own the %%docdir/sudo- dir. - fix some rpmlint warnings spaces vs tabs, unescaped macros. - fix bogus...
[L517] Simple WordList Generator for Windows
L517 is a word-list generator for the Windows Operating System. I wrote L517 to be the only word-list generator and editor I would ever need. L517 is small considering what it does, it is fast considering it's a Windows app, and it is lightweight when not loading astronomically large lists. A...
CVE-2012-5076
creationtimestamp| type| source ---|---|--- 2012-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22657 2013-01-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24309 2018-05-29 15:50:33+00:00| seen|...
Web Help Desk 11.0.7 Cross Site Scripting
Author: loneferret of Offensive Security Product: Web Help Desk by SolarWinds Version: 11.0.7 older versions may be affected Vendor Site: http://www.webhelpdesk.com Software Download: http://www.webhelpdesk.com/help-desk-software/ Discovered: August 18th 2012 Disclosure: August 19th 2012: Reporte...
CVE-2012-1153
creationtimestamp| type| source ---|---|--- 2012-05-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18922 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apprainuploadexec.rb 2025-02-06 03:13:40+00:00| seen|...
The Hackers Conference 2012 Call For Papers #THC2012
We are extremely delighted to announce the Call for Papers for The Hackers Conference 2012 It is a unique event, where the elite of the hacker world, leaders in the information security industry and the Internet community meet face to face to join their efforts to cooperate in addressing the most...