1708 matches found
PT-2019-12882 · Zoho · Zoho Manageengine Assetexplorer
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine AssetExplorer affected versions not specified Description: An issue was discovered in Zoho ManageEngine AssetExplorer, where there is a cross-site scripting XSS issue via the rdsName parameter in the "RCSettings.do" API...
GHSA-GC94-6W89-HPQR Command Injection in fs-path
All versions of fs-path are vulnerable to command injection is unsanitized user input is passed in. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available...
GHSA-7JFH-2XC9-CCV7 Cross-Site Scripting in public
All versions of public are vulnerable to stored cross-site scripting XSS. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time...
ZOHO ManageEngine ServiceDesk Plus Permission License and Access Control Issues Vulnerability
ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. A vulnerability exis...
Emerson DeltaV SE4306T01 IS DO 45 mA CHARM Communications Adapter Detection
Binary data 756663.prm...
FTPBruter - A FTP Server Brute Forcing Tool
Brute forcing tool for FTP server. FTPBruter can work in any OS if they have and support Python 3. Feature Brute force a FTP server with a username or a list of usernames That's all. Install and Run on Linux You have to install Python 3 first: Install Python 3 on Arch Linux and its distros: sudo...
CVE-2019-11362
app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...
River Past Cam Do 3.7.6 - Activation Code Local Buffer Overflow
River Past Cam Do 3.7.6 - Activation Code Local Buffer Overflow !/usr/bin/python -w Exploit Author: Chris Au Exploit Title: River Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code Date: 07-04-2019 Vulnerable Software: River Past Cam Do 3.7.6 Vendor Homepage: http://www.flexhex.com Versio...
River Past Cam Do 3.7.6 Local Buffer Overflow
!/usr/bin/python -w Exploit Author: Chris Au Exploit Title: River Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code Date: 07-04-2019 Vulnerable Software: River Past Cam Do 3.7.6 Vendor Homepage: http://www.flexhex.com Version: 3.7.6 Software Link:...
River Past Cam Do 3.7.6 - 'Activation Code' Local Buffer Overflow
!/usr/bin/python -w Exploit Author: Chris Au Exploit Title: River Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code Date: 07-04-2019 Vulnerable Software: River Past Cam Do 3.7.6 Vendor Homepage: http://www.flexhex.com Version: 3.7.6 Software Link:...
CVE-2019-1003086
A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpldoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...
CVE-2019-1003078
A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpldoTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server...
CVE-2018-16804
An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...
CVE-2018-16804
An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request...
CVE-2018-7972
This CVE entry is rejected/not used and does not represent an active vulnerability.
Arbitrary file download vulnerability in s-cms news portal system do***.php page
An arbitrary file download vulnerability exists in the do.php page of the s-cms news portal system, which allows an attacker to forge cookies to bypass authentication and download files at will...
A Second Life for the 'Do Not Track' Setting—With Teeth
In recent years, the setting has been criticized as being essentially meaningless. But it might have a crucial role to play in enforcing privacy regulations...
Will pay-for-privacy be the new normal?
Privacy is a human right, and online privacy should be no exception. Yet, as the US considers new laws to protect individuals’ online data, at least two proposals—one statewide law that can still be amended and one federal draft bill that has yet to be introduced—include an unwelcome bargain:...
file do_core_note Denial of Service Vulnerability
file is a command-line tool used on Unix-like systems to view file information. A security vulnerability exists in the docorenote file of the readelf.c file of the libmagic.a static link library in file version 5.35. A remote attacker could use this vulnerability to cause a denial of service stac...