118 matches found
CVE-2020-4693
IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782...
CVE-2020-1182
A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server. An authenticated attacke...
PT-2020-3765 · Microsoft · Dynamics 365 For Finance/Operations
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11 Description: A remote code execution issue exists, allowing an attacker to gain remote code execution via server-side script execution on the victim server. An...
rigidized.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1057234 Security Researcher error404 Helped patch 526 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting rigidized.com website and...
empleonuevo.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1023360 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting empleonuevo.com website an...
CVE-2019-8107
An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with export data transfer privileges can craft a request to perform arbitrary file deletion...
pzgolf.pl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1006269 Security Researcher geeknik Helped patch 8803 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pzgolf.pl website and its...
web.uconn.edu Cross Site Scripting vulnerability
Security Researcher Gh05tPT Helped patch 6836 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting web.uconn.edu website and its users. Following coordinat...
MISP - Malware Information Sharing Platform and Threat Sharing
The objective of MISP is to foster the sharing of structured information within the security community and abroad. MISP provides functionalities to support the exchange of information but also the consumption of the information by Network Intrusion Detection System NIDS, LIDS but also log analysi...
PT-2018-13040 · Dokuwiki · Dokuwiki
Name of the Vulnerable Software and Affected Versions: DokuWiki versions 2018-04-22a and earlier Description: The issue allows remote attackers to exfiltrate sensitive data and to execute arbitrary code via a value that is mishandled in a CSV export in the /lib/plugins/usermanager/admin.php file...
Foxit Reader Arbitrary File Write Remote Code Execution Vulnerability (CNVD-2018-15093)
Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...
Wireless GUI Android Security Assessment: Hijacker
Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng , MDK3 and Reaver . It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an ARM android device with an...
WhoIsConnectedSniffer - Detect who is connected to your network without scanning
WhoIsConnectedSniffer is a network discovery tool that listens to network packets on your network adapter using a capture driver WinpCap or MS network monitor and accumulates a list of computer and devices currently connected to your network. WhoIsConnectedSniffer uses various protocols to detect...
WhoIsConnectedSniffer - Network discovery tool that listens to network packets on your network
WhoIsConnectedSniffer is a network discovery tool that listens to network packets on your network adapter using a capture driver WinpCap or MS network monitor and accumulates a list of computer and devices currently connected to your network. WhoIsConnectedSniffer uses various protocols to detect...
DEBIAN-CVE-2012-3818
The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allow local users to obtain sensitive information...
t3_dbtools_seditio_plugin_CSRF
====================================================================== Vulnerable software: T3 DB Tools Version 1.6 seditio database management plugin. Developed by : http://www.t3-design.com/t3-db-tools/ MD5 SUM: 8ab362601793e238f504783fd9953dd4 dbtools.rar...
[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.1-1.fc14
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...
