6709 matches found
ownCloud 10.3.0 Stable Cross Site Request Forgery
Exploit Title: ownCloud 10.3.0 stable - Cross-Site Request Forgery Date: 2019-10-31 Exploit Author: Ozer Goker Vendor Homepage: https://owncloud.org Software Link: https://owncloud.org/download/ Version: 10.3 CVE: N/A Introduction Your personal cloud collaboration platform With over 50 million...
ownCloud 10.3.0 stable - Cross-Site Request Forgery Vulnerability
Exploit for linux platform in category web applications Exploit Title: ownCloud 10.3.0 stable - Cross-Site Request Forgery Exploit Author: Ozer Goker Vendor Homepage: https://owncloud.org Software Link: https://owncloud.org/download/ Version: 10.3 CVE: N/A Introduction Your personal cloud...
CVE-2019-18188
Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from an arbitrary zip file to a specific folder on the Apex One server, which could potentially lead to remote code execution RCE. The remote process execution is bound to the IUSR...
CVE-2019-17189
totemodata 3.0.0b936 has XSS via a folder name...
CVE-2019-17189
totemodata 3.0.0b936 has XSS via a folder name...
Cross site scripting
totemodata 3.0.0b936 has XSS via a folder name...
CVE-2019-17189
totemodata 3.0.0b936 has XSS via a folder name...
CVE-2019-17189
Totemo totemodata 3.0.0_b936 is affected by a Cross-Site Scripting (XSS) vulnerability in the WEB application, caused by a lack of proper validation of client-side data in a folder name. The issue is documented across multiple sources (CNVD, NVD, Red Hat context) as CVE-2019-17189. Exploitation d...
Persistence – Time Providers
Windows operating systems are utilizing the time provider architecture in order to obtain accurate time stamps from other network devices or clients in the network. Time providers are implemented in the form of a DLL file which resides in System32 folder. The service W32Time initiates during the...
CVE-2019-17189: Improper Neutralization of Input During Web Page Generation
totemodata 3.0.0b936 has XSS via a folder name...
PT-2019-14993
Name of the Vulnerable Software and Affected Versions totemodata version 3.0.0 b936 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via a folder name, allowing potential exploitation. Recommendations For totemodata version 3.0.0 b936, avoid using user-supplied...
ZipperDown Vulnerability
react-native-code-push is susceptible to zipperdown vulnerability. The vulnerability exists because it does not validate the folder of the zip file before performing the extraction of files and directly writing the content to arbitrary folder...
CVE-2019-16913
PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...
Default credentials
PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...
CVE-2019-16913
PC Protect Antivirus (v4.14.31) is installed to %PROGRAMFILES(X86)%\PCProtect with overly permissive folder ACLs (Everyone: (F)). The component also creates a service (SecurityService) that runs as LocalSystem. This combination enables privilege escalation to NT AUTHORITY\SYSTEM by replacing the ...
CVE-2019-16913
PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...
PT-2019-14863
Name of the Vulnerable Software and Affected Versions PC Protect Antivirus version 4.14.31 Description The issue concerns weak folder permissions in the default installation directory of PC Protect Antivirus, allowing any user to modify the contents of the directory and its subfolders...
CVE-2019-16913: Incorrect Default Permissions
PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...