Lucene search
+L

1770 matches found

Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.9 views

Mitsubishi Q68TD-G-H01 Analog I/O Module Detection

Binary data 751009.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.10 views

Mitsubishi Q68AD-G Analog I/O Module Detection

Binary data 751002.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.15 views

Mitsubishi R60DA8-G Analog I/O Module Detection

Binary data 751018.prm...

7.3AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2019/04/09 12:00 p.m.66 views

Hit the Easy Button for Your Organization’s Gmail Security

Fifteen years ago, Gmail was launched by Google. The web-based service now has 1.5 billion users a month. In addition to being the extremely popular personal email service, Gmail is also a key component of G Suite for organizations. One of the many reasons of Gmail’s popularity is its security...

7AI score
SaveExploits0
ICS
ICS
added 2019/04/09 12:00 a.m.254 views

Siemens Industrial Products with OPC UA (Update H)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC, SINEC-NMS, SINEMA, SINEMURIK Industrial Control Products with OPC UA Vulnerability: Uncaught Exception 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

7.8CVSS7.9AI score0.01646EPSS
SaveExploits0References8
NVD
NVD
added 2019/03/21 4:00 p.m.25 views

CVE-2018-19524

An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal G/EPON+IPTV SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Webpasswd function allows remote attackers to cause a denial of service segmentation fault or achieve unauthenticated...

10CVSS9.8AI score0.50523EPSS
SaveExploits5References6
CVE
CVE
added 2019/03/17 6:38 p.m.100 views

CVE-2018-19524

CVE-2018-19524 describes an unauthenticated stack overflow in Skyworth GPON HomeGateways/ONTs (DT741, DT721-cb, DT741-cb variants) caused by a long password in the Web_passwd function. The flaw allows remote attackers to trigger a denial of service (segmentation fault) or potentially achieve remo...

10CVSS9.8AI score0.50523EPSS
SaveExploits5References6Affected Software1
CNVD
CNVD
added 2019/03/15 12:00 a.m.11 views

G DATA Software Total Security Security Feature Issue Vulnerability

G DATA Software Total Security is a suite of antivirus software from the German company G DATA Software. The software is anti-phishing, anti-virus and anti-spam. A security feature issue vulnerability in the gdwfpcd.sys file in versions of G DATA Software Total Security prior to 2019-02-22, which...

7.5CVSS6.8AI score0.01377EPSS
SaveExploits1References1
Prion
Prion
added 2019/03/13 2:29 p.m.18 views

Authentication flaw

gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILEDEVICESECUREOPEN and therefore files and directories "inside" the \.\gdwfpcd device are not properly protected, leading to unintended impersonation or...

5CVSS7.5AI score0.01377EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2019/03/13 2:29 p.m.9 views

CVE-2019-9742

gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILEDEVICESECUREOPEN and therefore files and directories "inside" the \.\gdwfpcd device are not properly protected, leading to unintended impersonation or...

7.5CVSS7.1AI score0.01377EPSS
SaveExploits1References2
NVD
NVD
added 2019/03/13 2:29 p.m.23 views

CVE-2019-9742

gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILEDEVICESECUREOPEN and therefore files and directories "inside" the \.\gdwfpcd device are not properly protected, leading to unintended impersonation or...

7.5CVSS7.5AI score0.01377EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2019/03/13 2:00 p.m.28 views

CVE-2019-9742

gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILEDEVICESECUREOPEN and therefore files and directories "inside" the \.\gdwfpcd device are not properly protected, leading to unintended impersonation or...

7.5AI score0.01377EPSS
SaveExploits1References2
CVE
CVE
added 2019/03/13 2:00 p.m.53 views

CVE-2019-9742

CVE-2019-9742 affects G Data Software Total Security prior to 2019-02-22, via the driver gdwfpcd.sys. The vulnerability stems from Interpreted Device Characteristics lacking FILE_DEVICE_SECURE_OPEN, allowing an attacker to bypass ACLs and access files/directories inside the \.\gdwfpcd device, ena...

7.5CVSS7.5AI score0.01377EPSS
SaveExploits1References2Affected Software1
Schneier on Security
Schneier on Security
added 2019/03/01 11:59 a.m.98 views

Data Leakage from Encrypted Databases

Matthew Green has a super-interesting blog post about information leakage from encrypted databases. It describes the recent work by Paul Grubbs, Marie-Sarah Lacharité, Brice Minaud, and Kenneth G. Paterson. Even the summary is too much to summarize, so read it...

2AI score
SaveExploits0
OSV
OSV
added 2019/02/18 11:47 p.m.31 views

GHSA-QJVF-RMWG-64FR Downloads Resources over HTTP in install-g-test

Affected versions of install-g-test insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...

5.9CVSS5.8AI score0.00547EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.24 views

Downloads Resources over HTTP in install-g-test

Affected versions of install-g-test insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...

5.9CVSS3.3AI score0.00547EPSS
SaveExploits0References3Affected Software1
zdt
zdt
added 2019/02/13 12:00 a.m.195 views

Raisecom Technology GPON-ONU HT803G-07 Command Injection (1)

Raisecom Technology GPON-ONU HT803G-07 suffers from an authenticated command injection vulnerability in the fmgponloid parameter. Raisecom Technology GPON-ONU HT803G-07 Command Injection 1 ===================================== Authenticated Shell Command Injection...

0.03506EPSS
SaveExploits3
IBM Security Bulletins
IBM Security Bulletins
added 2019/01/31 1:45 a.m.89 views

Security Bulletin: Vulnerabilities in OpenSSL affect multiple products shipped with Intelligent Cluster. (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470)

Summary Information about security vulnerabilities affecting multiple products shipped as components of Intelligent Cluster has been published in security bulletins. Vulnerability Details Abstract Information about security vulnerabilities affecting multiple products shipped as components of...

1.3AI score0.99977EPSS
SaveExploits13Affected Software56
Openbugbounty
Openbugbounty
added 2019/01/02 12:46 p.m.13 views

g-technology.shop XSS vulnerability

Open Bug Bounty ID: OBB-718443 Description| Value ---|--- Affected Website:| g-technology.shop Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

0.1AI score
SaveExploits0
Kitploit
Kitploit
added 2018/12/21 8:56 p.m.156 views

Ustealer - Ubuntu Stealer, Steal Ubuntu Information In Local PC

Ubuntu stealer, steal ubuntu information in local pc nice with usb key Require G++ sudo apt-get install g++ libsqlite3 sudo apt-get install libsqlite3-dev Compilation Go in Ustealer/ folder and run makefile make Use ./ustealer Download Ustealer...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder