Lucene search
+L

37 matches found

Positive Technologies
Positive Technologies
•added 2020/09/25 12:00 a.m.•4 views

PT-2020-16291

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.13 Description The issue is related to the mishandling of file-extension dispatching, which can lead to code execution. Recommendations For versions prior to 88.0.13, update to version 88.0.13 or later to resolve...

9.8CVSS0.02475EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/25 12:00 a.m.•4 views

CVE-2020-26108: Undefined Security Weakness

cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution SEC-488...

9.8CVSS6.1AI score0.02475EPSS
SaveExploits0References1
Schneier on Security
Schneier on Security
•added 2020/09/22 11:36 a.m.•25 views

Amazon Delivery Drivers Hacking Scheduling System

Amazon drivers -- all gig workers who dont work for the company -- are hanging cell phones in trees near Amazon delivery stations, fooling the system into thinking that they are closer than they actually are: The phones in trees seem to serve as master devices that dispatch routes to multiple...

0.8AI score
SaveExploits0
Fedora
Fedora
•added 2019/09/03 1:03 a.m.•52 views

[SECURITY] Fedora 30 Update: python-slixmpp-1.4.2-1.fc30

Slixmpp is an MIT licensed XMPP library for Python 3.5+. It is a fork of SleekXMPP. Goals is to only rewrite the core of the library the low level socket handling, the timers, the events dispatching in order to remove all threads...

7.5CVSS3.1AI score0.02279EPSS
SaveExploits1
NVD
NVD
•added 2019/07/30 2:15 p.m.•28 views

CVE-2019-14392

cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching SEC-501...

8.8CVSS9.1AI score0.01841EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/07/30 2:00 p.m.•36 views

CVE-2019-14392

cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching SEC-501...

9.1AI score0.01841EPSS
SaveExploits0References1
CVE
CVE
•added 2019/07/30 2:00 p.m.•59 views

CVE-2019-14392

CVE-2019-14392 affects cPanel prior to 80.0.22, where incorrect URI dispatching enables remote code execution from a demo account (SEC-501). Impact: remote code execution with high severity; no in-wild exploit details provided in the sources. Remediation: upgrade to 80.0.22 or later. If known, ve...

8.8CVSS9AI score0.01841EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/30 12:00 a.m.•11 views

CVE-2019-14392: Undefined Security Weakness

cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching SEC-501...

8.8CVSS6.2AI score0.01841EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/07/30 12:00 a.m.•4 views

PT-2019-13661

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 80.0.22 Description The issue allows remote code execution by a demo account due to incorrect URI dispatching. Recommendations For versions prior to 80.0.22, update to version 80.0.22 or later to resolve the issue...

8.8CVSS0.01841EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2018/09/28 12:00 a.m.•25 views

Fedora 27 : mozilla-noscript (2018-09c51bbcec)

Changes since 10.1.8.16: === v 10.1.9.6 ============================================================= - TB Gracefully handle legacy external message recipients - XSS Updated known HTML5 events - Better IPV6 support - UI support for protocol-only entries v 10.1.9.5...

9.8CVSS8.5AI score0.0312EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/12/17 12:00 a.m.•17 views

SQL Injection Vulnerability in Shanghai Sizen GPS Global Positioning Monitoring and Dispatching System

Shanghai Sizen GPS Global Positioning Monitoring and Dispatching System is a set of integrated GPS, GIS, GPRS or CDMA1X and compatible with GSM technology to provide users with mobile target positioning, monitoring, scheduling, alarming, information communication and other services. SQL injection...

7.6AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2016/01/28 12:00 a.m.•36 views

Apple Mac OSX - 'IOBluetoothHCIUserClient' Arbitrary Kernel Code Execution

/ Source: https://code.google.com/p/google-security-research/issues/detail?id=569 IOBluetoothHCIUserClient uses an IOCommandGate to dispatch external methods; it passes a pointer to the structInput of the external method as arg0 and ::SimpleDispatchWL as the Action. It neither passes nor checks t...

7.2CVSS7.3AI score0.01027EPSS
SaveExploits2
Zero Day Initiative
Zero Day Initiative
•added 2015/07/30 12:00 a.m.•40 views

IBM Tivoli Storage Manager FastBack Server Opcode 8192 Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 8192. By sending a crafted packet on TCP...

10CVSS7.4AI score0.08979EPSS
SaveExploits0References1
Hacker One
Hacker One
•added 2015/05/05 9:25 a.m.•50 views

Concrete CMS: Local File Inclusion Vulnerability in Concrete5 version 5.7.3.1

Concrete5 is vulnerable to a Local File Inclusion because it fails to properly validate the path for incoming requests during the dispatching process. This vulnerability exists because the path is retrieved using the Request::getPathInfo method from the Symfony framework, which allows to specify...

6.8AI score
SaveExploits0
Fedora
Fedora
•added 2013/08/24 12:05 a.m.•15 views

[SECURITY] Fedora 19 Update: acpid-2.0.19-5.fc19

acpid is a daemon that dispatches ACPI events to user-space programs...

2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2013/03/11 12:00 a.m.•42 views

openSUSE: Security Advisory for libvirt (openSUSE-SU-2013:0274-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.6AI score0.05774EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/03/19 12:00 a.m.•27 views

Mozilla Products Multiple Vulnerabilities (Mar 2012) - Windows

Mozilla Firefox/Thunderbird/Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.8AI score0.06585EPSS
SaveExploits1References12
Rows per page
Query Builder