8814 matches found
MikroTik RouterOS - sshd (ROSSSH) Remote Heap Corruption
During an audit the Mikrotik RouterOS sshd ROSSSH has been identified to have a remote previous to authentication heap corruption in its sshd component. Exploitation of this vulnerability will allow full access to the router device. This analysis describes the bug and includes a way to get...
CVE-2013-4981
creationtimestamp| type| source ---|---|--- 2013-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27942...
CVE-2013-4980
creationtimestamp| type| source ---|---|--- 2013-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27942...
CVE-2013-4978
creationtimestamp| type| source ---|---|--- 2013-08-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38742...
CVE-2013-4727
creationtimestamp| type| source ---|---|--- 2013-08-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38740...
WordPress Post-Gallery Cross Site Scripting
The Wordpress post-gallery Plugin suffers from a Cross-Site Scripting vulnerability. Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress post-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected]...
WordPress Video Whisper Cross Site Scripting
Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress videowhisper-live-streaming-integration Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected] Home : http://iedb.ir - http://iedb.ir/acc Software Link...
CVE-2013-1662
creationtimestamp| type| source ---|---|--- 2013-08-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40169 2013-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27938 2018-05-29 15:50:33+00:00| seen|...
CVE-2013-6283
creationtimestamp| type| source ---|---|--- 2013-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27700...
WordPress Trafficanalyzer Plugin XSS Vulnerability
WordPress Trafficanalyzer Plugin is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
CVE-2013-5117
creationtimestamp| type| source ---|---|--- 2013-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27602...
CVE-2012-3282
creationtimestamp| type| source ---|---|--- 2013-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27555...
CVE-2013-5312
creationtimestamp| type| source ---|---|--- 2013-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27519...
CVE-2013-4241
creationtimestamp| type| source ---|---|--- 2013-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27531...
CVE-2013-5311
creationtimestamp| type| source ---|---|--- 2013-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27519...
CVE-2008-2335
creationtimestamp| type| source ---|---|--- 2013-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27519...
CVE-2013-4240
creationtimestamp| type| source ---|---|--- 2013-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27531...
Relax, You Don't Have to Fix Every Vulnerability
Here’s an idea: stop fixing every vulnerability you read about. The best thing to do, it turns out, is to look at the vulnerabilities that are in both Metasploit and the Exploit Database and fix those. That gives you the highest chance of fixing bugs that are likely to be used in an actual attack...