4121 matches found
Delta Electronics Delta Industrial Automation Screen Editor
CVSS v3 5.5 ATTENTION: Low skill level to exploit. Vendor: Delta Electronics, Incorporated Delta Electronics Equipment: Delta Industrial Automation Screen Editor Vulnerabilities: Stack-based Buffer Overflow, Use-after-Free, Out-of-bounds Write, Type Confusion AFFECTED PRODUCTS The following...
Apple macOS - IOHIDSystem Kernel ReadWrite
Apple macOS - IOHIDSystem Kernel ReadWrite Sources: https://siguza.github.io/IOHIDeous/ https://github.com/Siguza/IOHIDeous/ IOHIDeous A macOS kernel exploit based on an IOHIDFamily 0day. Write-up here: https://siguza.github.io/IOHIDeous/ Notice The prefetch timing attack I'm using for hid for so...
CVE-2017-5934
Cross-site scripting XSS vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2017-16769
Name of the Vulnerable Software and Affected Versions MoinMoin versions prior to 1.9.10 Description A cross-site scripting XSS issue exists in the link dialogue of the GUI editor, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.9.10, updat...
UBUNTU-CVE-2017-5934
Cross-site scripting XSS vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
BlueMaho v090417 - Bluetooth Security Testing Suite
BlueMaho is GUI-shell interface for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do - testing to find unknown vulns. Also it can form nice...
UBUNTU-CVE-2017-17535
lib/gui.py in Bob Hepple gjots2 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
CVE-2017-17525
guiclient/guiclient.cpp in xTuple PostBooks 4.7.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
FortiCloud XSS vulnerability in on-demand sandbox GUI
Before Dec 5th, 2017, a Cross-Site-Scripting XSS vulnerability in forticloud.com on-demand sandbox GUI may have allowed an authenticated user to inject arbitrary web code or HTML in the context of the victim's browser via the upload of a maliciously crafted file...
[SECURITY] Fedora 27 Update: qbittorrent-4.0.1-1.fc27
A Bittorrent client using rblibtorrent and a Qt4 Graphical User Interface. It aims to be as fast as possible and to provide multi-OS, unicode support...
PSFTPd Windows FTP Server Command Injection Vulnerability
PSFTPd Windows FTP Server is a suite of FTP server software. The software supports protocols such as FTP, FTPS and SFTP. A command injection vulnerability exists in PSFTPd Windows FTP Server version 10.0.4 Build 729. An attacker can exploit this vulnerability to hide data and create arbitrary...
CVE-2017-15270
The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values CSV file. This can be used by attackers to hide data in the Graphical User Interface GUI view and create arbitrary entries to a certain extent. Special characters such as '"' and ',' a...
Hardcoded credentials
The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values CSV file. This can be used by attackers to hide data in the Graphical User Interface GUI view and create arbitrary entries to a certain extent. Special characters such as '"' and ',' a...
CVE-2017-15270: Improper Input Validation
The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values CSV file. This can be used by attackers to hide data in the Graphical User Interface GUI view and create arbitrary entries to a certain extent. Special characters such as '"' and ',' a...
NetScaler VPX on 11.1 Firmware Shows as VPX (1) in GUI when Using MAS Pooled Capacity Licensing
NetScaler GUI showing "NetscalerRemoteLicensedVirtualAppliance”. However, VPX instance is showing “License type” as Enterprise on GUI but the model ID was 1 i.e, VPX1...
CVE-2017-1710
A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...
Privilege escalation
A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...
CVE-2017-1710: Undefined Security Weakness
A vulnerability in the Service Assistant GUI in IBM Storwize V7000 2076 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531...
PT-2017-14712
Name of the Vulnerable Software and Affected Versions IBM Storwize V7000 2076 version 8.1 Description A remote attacker could exploit a vulnerability in the Service Assistant GUI to perform a privilege escalation. Recommendations For IBM Storwize V7000 2076 version 8.1, update to a version that...