Lucene search
+L

1256 matches found

ATTACKERKB
ATTACKERKB
added 2021/05/17 11:15 a.m.7 views

CVE-2021-29053

Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1 allow remote authenticated users to execute arbitrary SQL commands via the classPKField parameter to 1 CommerceChannelRelFinder.countByCC, or 2 CommerceChannelRelFinder.findByCC...

8.8CVSS6.3AI score0.01158EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2021/05/02 12:30 p.m.1652 views

Storm-Breaker - Tool Social Engineering (Access Webcam, Microphone, OS Password Grabber And Location Finder) With Ngrok

Tool Social Engineering Access Webcam, Microphone, OS Password Grabber And Location Finder With Ngrok Features: Get Device Information Without Any Permissions Access Location SMARTPHONES Os Password Grabber WIN-10 Access Webcam Access Microphone Operating Systems Tested Kali Linux 2020 Installati...

7.3AI score
SaveExploits0References1
Talos
Talos
added 2021/04/19 12:00 a.m.190 views

Synology DSM synoagentregisterd server finder out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the synoagentregisterd server finder functionality of Synology DSM 6.2.3 25426 DS120j. A specially crafted HTTP response can lead to remote code execution. An attacker can use man-in-the-middle techniques to trigger this vulnerability. Tested...

8.7AI score
SaveExploits0
Patchstack
Patchstack
added 2021/03/08 12:00 a.m.19 views

WordPress Super Store Finder premium plugin <= 6.3 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by Eagle Eye in WordPress Super Store Finder premium plugin versions = 6.3. Solution Plugin vendor claims that vulnerability is patched in version 6.4...

3.3AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/02/26 10:15 p.m.7 views

CVE-2021-26561

Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via synofindersite HTTP header...

8.1CVSS7.8AI score0.02009EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/02/26 12:00 a.m.10 views

PT-2021-17040 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.3-25426-3 Description: The issue is an out-of-bounds write vulnerability in the synoagentregisterd component. This allows man-in-the-middle attackers to execute arbitrary code via the syn...

9CVSS9.1AI score0.01851EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/02/26 12:00 a.m.8 views

PT-2021-17039 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.3-25426-3 Description: A stack-based buffer overflow issue allows man-in-the-middle attackers to execute arbitrary code via the syno finder site HTTP header. This enables attackers to...

9CVSS9.2AI score0.02009EPSS
SaveExploits1References6
NVD
NVD
added 2021/01/20 6:15 p.m.21 views

CVE-2021-21269

Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust join method without checking user input might have made it abe to do a Path Traversal attack causing to read more...

7.7CVSS7.4AI score0.01392EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/20 6:15 p.m.18 views

Path traversal

Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust join method without checking user input might have made it abe to do a Path Traversal attack causing to read more...

4CVSS6.3AI score0.01392EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/20 5:50 p.m.30 views

CVE-2021-21269 Path Traversal in Keymaker

Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust join method without checking user input might have made it abe to do a Path Traversal attack causing to read more...

7.7CVSS7.6AI score0.01392EPSS
SaveExploits0References2
CVE
CVE
added 2021/01/20 5:50 p.m.54 views

CVE-2021-21269

CVE-2021-21269 affects Keymaker (a Mastodon Community Finder based Matrix serverlist page). Before v0.2.0, the assets endpoint did not validate the requested extension, and the Rust join call on user input allowed a Path Traversal, enabling reading of files beyond the intended directory. This cou...

7.7CVSS6.4AI score0.01392EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/12/28 12:00 a.m.15 views

PT-2020-17362 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: An issue was discovered where the autosuggestion feature of com finder did not respect the access level of the corresponding terms. Recommendations: For Joomla! versions 2.5.0 through 3.9.22,...

7.5CVSS6.9AI score0.01342EPSS
SaveExploits0References6
OSV
OSV
added 2020/12/18 9:15 a.m.9 views

CVE-2020-35548

An issue was discovered in Finder on Samsung mobile devices with Q10.0 software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 December 2020...

5.5CVSS6.1AI score0.00138EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/18 9:15 a.m.27 views

CVE-2020-35548

An issue was discovered in Finder on Samsung mobile devices with Q10.0 software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 December 2020...

5.5CVSS5.5AI score0.00138EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/18 9:15 a.m.26 views

Design/Logic Flaw

An issue was discovered in Finder on Samsung mobile devices with Q10.0 software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 December 2020...

2.1CVSS5.5AI score0.00138EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/12/18 8:46 a.m.59 views

CVE-2020-35548

CVE-2020-35548 affects Finder on Samsung mobile devices running Q(10.0). The issue arises from calling a non-existent provider, which allows an attacker to cause a denial of service. Connected sources corroborate the same description; no explicit remediation or patch details are provided in the s...

5.5CVSS5.5AI score0.00138EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/18 8:46 a.m.40 views

CVE-2020-35548

An issue was discovered in Finder on Samsung mobile devices with Q10.0 software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 December 2020...

5.5AI score0.00138EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/12/18 12:00 a.m.15 views

Samsung Finder For Samsung Mobile Devices Q Security Vulnerability

Samsung Finder For Samsung Mobile Devices Q is a system software for mobile devices from Samsung, South Korea used to find arbitrary resources within the device. A security vulnerability exists in Samsung mobile devices with Q10.0, which originates from a call to a non-existent provider and can b...

5.5CVSS6.2AI score0.00138EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2020/12/10 11:30 a.m.73 views

DarkSide - Tool Information Gathering And Social Engineering

Features: Hacker Dashboard Hacker News thehackernews.com/ New Exploits Exploit-db.com Hacking Tutorials Video youtube.com The Latest Prices OF Digital Currencies Rials , Usd Information Gathering Bypass Cloud Flare Cms Detect Trace Toute Reverse IP Port Scan IP location Finder Show HTTP Header Fi...

7.4AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2020/11/16 12:00 a.m.760 views

Super Store Finder 3.3 Cross Site Scripting

Exploit type : XSS INJECTION Exploit title : Super Store Finder Add location XSS Injection Descriptions : XSS injection from adding store and reflected XSS in SQL error login page PHP Script affected : Super Store Finder | Mega Locator Plugin URI : http://www.superstorefinder.net/ Version : 3.3 a...

7.4AI score
SaveExploits0
Rows per page
Query Builder