Lucene search
+L

1538 matches found

Spring Security Advisories
Spring Security Advisories
added 2023/06/15 12:00 a.m.17 views

A Bootiful Podcast: Angular Google Developer Expert Santosh Yadav

Hi, Spring fans! In this installment Josh Long @coffesoftware talks to Angular Google Developer Expert Santosh Yadav @santoshyadavdev about the latest and greatest in the JavaScript and Angular ecosystem...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/06/08 12:00 a.m.332 views

Expert Restaurant eCommerce 1.0 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/06/08 12:00 a.m.273 views

Expert Restaurant eCommerce 1.0 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score
SaveExploits0
zdt
zdt
added 2023/06/07 12:00 a.m.279 views

Expert Job Portal Management System 1.0 SQL Injection Vulnerability

┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐ ┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ┌┘ Vulnerability ┌┘ └───────────────────────────────────────────────────────────────────────────────────────┘┘ : Author : CraCkEr : │...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/06/07 12:00 a.m.278 views

Expert Job Portal Management System 1.0 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/06/06 12:00 a.m.253 views

Macro Expert 4.9 Unquoted Service Path

Exploit Title: Macro Expert 4.9 - Unquoted Service Path Date: 04/06/2023 Exploit Author: Murat DEMIRCI Vendor Homepage: http://www.macro-expert.com/ Software Link: http://www.macro-expert.com/product/gmsetup4.9.exe Version: 4.9 Tested on: Windows 10 Proof of Concept : C:\Users\Muratsc qc "Macro...

7.1AI score
SaveExploits0
zdt
zdt
added 2023/06/06 12:00 a.m.292 views

Macro Expert 4.9 - Unquoted Service Path Vulnerability

Exploit Title: Macro Expert 4.9 - Unquoted Service Path Exploit Author: Murat DEMIRCI Vendor Homepage: http://www.macro-expert.com/ Software Link: http://www.macro-expert.com/product/gmsetup4.9.exe Version: 4.9 Tested on: Windows 10 Proof of Concept : C:\Users\Muratsc qc "Macro Expert" SC...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2023/06/06 12:00 a.m.286 views

Macro Expert 4.9 - Unquoted Service Path

Exploit Title: Macro Expert 4.9 - Unquoted Service Path Date: 04/06/2023 Exploit Author: Murat DEMIRCI Vendor Homepage: http://www.macro-expert.com/ Software Link: http://www.macro-expert.com/product/gmsetup4.9.exe Version: 4.9 Tested on: Windows 10 Proof of Concept : C:\Users\Muratsc qc "Macro...

5.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:00 a.m.13 views

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Exper, arises from deficiencies in the separation of the controlled system area. This allows a intruder to carry out unauthorized maintenance actions.

The vulnerability of the EcoStruxure Control Exper programming tool for programmable logic controllers is related to deficiencies in the separation of the controlled system area. Exploiting this vulnerability could allow a malicious actor to perform a service failure remotely...

5.5CVSS5.9AI score0.00146EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:00 a.m.13 views

The vulnerability of the Power Monitoring Expert software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Power Monitoring Exper software-related system is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS6.6AI score0.00771EPSS
SaveExploits0References3Affected Software1
Malwarebytes
Malwarebytes
added 2023/05/22 6:00 a.m.20 views

Webinar recap: EDR vs MDR for business success

Did you miss our recent webinar on EDR vs. MDR? Don't worry, we've got you covered! In this blog post, we'll be recapping the highlights and key takeaways from the webinar hosted by Marcin Kleczynski, CEO and co-founder of Malwarebytes, and featuring guest speaker Joseph Blankenship, Vice Preside...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.15 views

The vulnerability of the microprogramming software of Modicon PAC controllers and PLCs included in EcoStruxure Control Expert and EcoStruxure Process Expert allows a intruder to trigger maintenance failures.

The vulnerability of the microprogramming software of Modicon PAC controllers and PLCs included in EcoStruxure Control Expert and EcoStruxure Process Expert lies in the storage of data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to trigger service...

6.8CVSS7.1AI score0.00839EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.16 views

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Expert, and the automation system for technological processes, EcoStruxure Process Expert, allows a intruder to gain unauthorized access to SMTP account data.

The vulnerability of the programming software for PLCs programmable logic controllers, as well as the EcoStruxure Process Expert automation system, is related to insufficient protection for registration data. Exploiting this vulnerability could allow attackers to gain unauthorized access to SMTP...

6.2CVSS5.9AI score0.00236EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
added 2023/05/13 12:00 a.m.40 views

Schneider Electric EcoStruxure Operator Terminal Expert 代码注入漏洞

Schneider Electric EcoStruxure Operator Terminal Expert is a touch screen configuration software from Schneider Electric, France. This software branch is primarily used to create and edit touch applications. A code injection vulnerability exists in Schneider Electric EcoStruxure Operator Terminal...

7.8CVSS7.6AI score0.00597EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2023/05/08 3:24 p.m.22 views

Join Our Webinar: Learn How to Defeat Ransomware with Identity-Focused Protection

Are you concerned about ransomware attacks? You're not alone. In recent years, these attacks have become increasingly common and can cause significant damage to organizations of all sizes. But there's good news - with the right security measures in place, such as real-time MFA and service account...

5.9AI score
SaveExploits0
The Coalfire Blog
The Coalfire Blog
added 2023/05/04 2:37 p.m.18 views

Top 10 challenges of building an in-house application security program

Building a successful application security program can be a daunting task, as it involves many different skill sets. Resource constraints, lack of expertise, and cultural resistance are among the many challenges preventing organizations from reaping the full benefits of an in-house AppSec program...

6.9AI score
SaveExploits0
The Coalfire Blog
The Coalfire Blog
added 2023/05/04 2:37 p.m.16 views

Top 10 challenges of building an in-house application security program

Building a successful application security program can be a daunting task, as it involves many different skill sets. Resource constraints, lack of expertise, and cultural resistance are among the many challenges preventing organizations from reaping the full benefits of an in-house AppSec program...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:00 a.m.13 views

The vulnerability of the programming software for PLCs (programmable logic controllers), EcoStruxure Control Exper, allows a intruder to execute arbitrary code.

The vulnerability of the EcoStruxure Control Exper programming tool for programmable logic controllers is related to deficiencies in the separation of the controlled system area. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.00845EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2023/04/30 8:54 a.m.16 views

3d-printing-expert.com Cross Site Scripting vulnerability OBB-3281317

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6AI score
SaveExploits0
CNVD
CNVD
added 2023/04/21 12:00 a.m.41 views

Schneider Electric StruxureWare Data Center Expert Operating System Command Injection Vulnerability

Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. An operating system command injection...

8.1CVSS7.7AI score0.00818EPSS
SaveExploits0References1
Rows per page
Query Builder