Lucene search
+L

4176 matches found

Microsoft KB
Microsoft KB
•added 2018/04/10 7:00 a.m.•76 views

Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: April 10, 2018

Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: April 10, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...

4.3CVSS4.2AI score0.05818EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2018/04/10 7:00 a.m.•65 views

Description of the security update for the Microsoft graphics component denial of service vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018

None None...

5.5CVSS6.7AI score0.01373EPSS
SaveExploits0
CNVD
CNVD
•added 2018/03/29 12:00 a.m.•13 views

Enhancesoft osTicket Cross-Site Scripting Vulnerability

Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in /ajax.php/form/help-topic in Enhancesoft osTicket versions prior to 1.10.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the he...

6.1CVSS5.9AI score0.0202EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/03/27 12:00 a.m.•4 views

PT-2018-17938

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.10.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in the "/ajax.php/form/help-topic" API endpoint. Recommendations...

6.1CVSS0.0202EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/27 12:00 a.m.•5 views

CVE-2018-7192: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "message" parameter...

6.1CVSS6.4AI score0.0202EPSS
SaveExploits1References4
Openbugbounty
Openbugbounty
•added 2018/03/25 7:21 a.m.•12 views

wildfirelegalhelp.org XSS vulnerability

Open Bug Bounty ID: OBB-590991 Description| Value ---|--- Affected Website:| wildfirelegalhelp.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
SaveExploits0
Citrix
Citrix
•added 2018/03/20 12:00 a.m.•18 views

Receiver install error "DVCRenderingAdapter.dll failed to register"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. While installing Receiver, users may encounter an error like: "DVCRenderingAdapter.dll failed to...

7AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2018/03/13 12:00 a.m.•56 views

Description of the security update for the Microsoft Video Control elevation of privilege vulnerability in WES09 and POSReady 2009: March 13, 2018

None None...

7CVSS7AI score0.01108EPSS
SaveExploits0
Citrix
Citrix
•added 2018/03/05 12:00 a.m.•19 views

The XenMobile server is not sending the required intermediate certificate

Whenever verifying the certificate for XenMobile on https://www.digicert.com/help/ you get the following: The server is not sending the required intermediate certificate...

7.2AI score
SaveExploits0
Citrix
Citrix
•added 2018/02/14 12:00 a.m.•16 views

Receiver For Windows - 4.10.1 -  Published application stops immediately after it is launched

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Receiver For Windows - 4.10.1 - Published application stops immediately after it is launched...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2018/02/13 12:00 a.m.•15 views

Error : "Cannot Connect to Server" with Citrix Receiver for Mac 12.7, Unable to Launch Applications

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Mac Receiver 12.7: Unable to launch application Error: "Cannot connect to server" while connecting...

7.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2018/02/13 12:00 a.m.•45 views

Description of the security update for WES09 and POSReady 2009: February 13, 2018 (KB4074852)

None None...

5.7AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/01/28 12:00 a.m.•31 views

Sony Playstation 3 (PS3) 4.82 - Jailbreak (ROP)

Sony Playstation 3 PS3 4.82 - Jailbreak ROP EDB Note http://ps3xploit.com/help/dumper.html EDB Download https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/44820.zip Dumper Help Warning: Due to the lack of proper checks after exiting the ROP chain, it is possible in...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2018/01/10 12:00 a.m.•305 views

Microsoft Word 2010 Service Pack 2 Multiple RCE Vulnerabilities (KB4011659)

This host is missing a critical security update according to Microsoft KB4011659 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.7AI score0.95121EPSS
SaveExploits7References3
Microsoft KB
Microsoft KB
•added 2018/01/09 8:00 a.m.•151 views

Description of the security update for Office 2010: January 9, 2018

Description of the security update for Office 2010: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerabilities, go to the following Common...

9.3CVSS8.9AI score0.95121EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2018/01/09 8:00 a.m.•64 views

Description of the security update for Office 2010: January 9, 2018

Description of the security update for Office 2010: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

9.3CVSS8.9AI score0.19268EPSS
SaveExploits0
ThreatPost
ThreatPost
•added 2017/12/20 3:23 p.m.•19 views

CHM Help Files Deliver Brazilian Banking Trojan

Security researchers are warning of a new spam campaign targeting Brazilian institutions that contain Compiled HTML file attachments that are used to deliver a banking Trojan. Spam messages contain a malicious CHM attachment called “comprovante.chm”, wrote Rodel Mendrez, senior security researche...

7.2AI score
SaveExploits0References3
CNVD
CNVD
•added 2017/12/18 12:00 a.m.•14 views

Geomview Parameter Injection Vulnerability

Geomview is an interactive 3D graphics viewing program for Unix-like systems. The program supports the use of the mouse to rotate, zoom in or out of graphics, and more. A security vulnerability exists in the common/help.c file in Geomview version 1.9.5, which originates from the program not...

8.8CVSS7.3AI score0.01495EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2017/12/17 1:33 p.m.•29 views

AndroTickler - Penetration Testing and Auditing Toolkit for Android Apps

A java tool that helps to pentest Android apps faster, more easily and more efficiently. AndroTickler offers many features of information gathering, static and dynamic checks that cover most of the aspects of Android apps pentesting. It also offers several features that pentesters need during the...

7.2AI score
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2017/12/12 8:00 a.m.•73 views

Description of the security update for the Windows information disclosure vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018

None None...

6.5CVSS6.8AI score0.09617EPSS
SaveExploits0
Rows per page
Query Builder