Lucene search
K

8682 matches found

Kitploit
Kitploit
added 2016/04/25 10:11 p.m.12 views

IPGeoLocation - A tool to retrieve IP Geolocation information

A tool to retrieve IP Geolocation information Powered by ip-api Requirements Python 3.x Features Retrieve IP or Domain Geolocation. Retrieve your own IP Geolocation. Retrieve Geolocation for IPs or Domains loaded from file. Each target in new line. Define your own custom User Agent string. Select...

7.1AI score
Exploits0References1
OSV
OSV
added 2016/04/22 6:59 p.m.5 views

CVE-2016-1916

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

5.4CVSS5.9AI score
Exploits0References2
NVD
NVD
added 2016/04/22 6:59 p.m.11 views

CVE-2016-1916

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

5.4CVSS5.3AI score0.00802EPSS
Exploits0References2
Prion
Prion
added 2016/04/22 6:59 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

3.5CVSS5.7AI score0.00802EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2016/04/22 6:0 p.m.15 views

CVE-2016-1916

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

5.3AI score0.00802EPSS
Exploits0References2
NVD
NVD
added 2016/04/11 9:59 p.m.14 views

CVE-2015-5349

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet...

9.3CVSS7.9AI score0.02109EPSS
Exploits0References3
Prion
Prion
added 2016/04/11 9:59 p.m.14 views

Design/Logic Flaw

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet...

9.3CVSS7.9AI score0.02109EPSS
Exploits0References3Affected Software2
CVE
CVE
added 2016/04/11 9:0 p.m.63 views

CVE-2015-5349

CVE-2015-5349 : The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet. ...

9.3CVSS7.9AI score0.02109EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2016/04/11 9:0 p.m.16 views

CVE-2015-5349

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet...

9.3CVSS7.9AI score0.02109EPSS
Exploits0
Cvelist
Cvelist
added 2016/04/11 9:0 p.m.28 views

CVE-2015-5349

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet...

7.9AI score0.02109EPSS
Exploits0References3
OSV
OSV
added 2016/04/11 2:59 p.m.8 views

CVE-2016-0784

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. dot dot in a ZIP archive entry...

6.5CVSS6.2AI score0.56314EPSS
Exploits2References7
Kitploit
Kitploit
added 2016/04/08 11:0 p.m.14 views

Gladius - Easy mode from Responder to Credentials

Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and smarthashdump. Install pip install watchdog git clone https://www.github.com/praetorian-inc/gladius cd gladius git clone...

7.2AI score
Exploits0References1
The Hacker News
The Hacker News
added 2016/04/06 8:43 p.m.17 views

'Hacking Team' Loses License to Sell Surveillance Malware Outside Europe

Hacking Team – the infamous Italy-based spyware company that had more than 400 GB of its confidential data stolen last year – is facing another trouble. This time not from other hackers, but from its own government. Hacking Team is infamous for selling surveillance spyware to governments and...

6.8AI score
Exploits0
Amazon
Amazon
added 2016/04/06 12:0 a.m.77 views

Important: openssl098e

Issue Overview: A denial of service flaw was found in the way OpenSSL handled SSLv2 handshake messages. A remote attacker could use this flaw to cause a TLS/SSL server using OpenSSL to exit on a failed assertion if it had both the SSLv2 protocol and EXPORT-grade cipher suites enabled. CVE-2015-02...

5.9CVSS7.2AI score0.82112EPSS
Exploits2
hackapp
hackapp
added 2016/04/01 10:3 a.m.11 views

Angel Stone RPG - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Angel Stone RPG published at the 'play' market has multiple vulnerabilities...

0.6AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:51 a.m.16 views

Super Party Vegas Slots - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Super Party Vegas Slots published at the 'play' market has multiple vulnerabilities...

0.6AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:24 a.m.15 views

AppSales. Best Apps on Sale - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application AppSales. Best Apps on Sale published at the 'play' market has multiple vulnerabilities...

0.4AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:19 a.m.11 views

QuickPic Gallery - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application QuickPic Gallery published at the 'play' market has multiple vulnerabilities...

0.5AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:17 a.m.8 views

NetCarShow - Cars: News & Pics - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application NetCarShow - Cars: News & Pics published at the 'play' market has multiple vulnerabilities...

1.6AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:11 a.m.12 views

VR Theater for Cardboard - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application VR Theater for Cardboard published at the 'play' market has multiple vulnerabilities...

0.6AI score
Exploits0References1Affected Software1
Rows per page
Query Builder