182 matches found
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (CVE-2020-16898) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
On October 13, 2020, Microsoft fixed a critical remote code execution vulnerability in the Windows TCP/IP stack for handling ICMPv6 Router Advertisement packets. While Microsoft ranks this vulnerability as “Exploitation More Likely,” we may see a proof-of-concept released soon. The security issue...
RSA IG&L Aveksa 7.1.1 - Remote Code Execution Vulnerability
Exploit for multiple platform in category web applications Exploit Title: RSA IG&L Aveksa 7.1.1 - Remote Code Execution Exploit Author: Jakub Palaczynski, Lukasz Plonka Vendor Homepage: https://www.rsa.com/ Version: 7.1.1, prior to P02 CVE : CVE-2019-3759 all vulnerable versions can be found at...
RSA IG&L Aveksa 7.1.1 - Remote Code Execution
Exploit Title: RSA IG&L Aveksa 7.1.1 - Remote Code Execution Date: 2019-04-16 Exploit Author: Jakub Palaczynski, Lukasz Plonka Vendor Homepage: https://www.rsa.com/ Version: 7.1.1, prior to P02 CVE : CVE-2019-3759 all vulnerable versions can be found at...
ig-bauplan.de Cross Site Scripting vulnerability
Security Researcher kun-fly Helped patch 577 vulnerabilities Received 7 Coordinated Disclosure badges Received 40 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting ig-bauplan.de website and its users. Following coordinated...
Automatically Discover, Prioritize and Remediate Microsoft SMBv3 RCE Vulnerability (CVE-2020-0796) using Qualys VMDR
This month’s Patch Tuesday, Microsoft disclosed a critical “wormable” remote code execution RCE vulnerability in Microsoft Server Message Block 3.1.1 SMBv3 protocol. The exploitation of this vulnerability opens systems up to a 'wormable' attack, which means it would be easy to move from victim to...
New EOL QIDs for Microsoft Windows 7 and 2008/R2
Qualys Vulnerability Signature, version 2.4.815-2, will include EOL QIDs detections for end-of-life software for Windows 7, Windows 2008, and Windows 2008 R2. Customers will be able to scan the QIDs shown below using Qualys Vulnerability Management VM: QID 105859 - EOL/Obsolete Operating System:...
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
PT-2019-14419 · WordPress · Icegram Plugin
Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.10.29 for WordPress Description: The issue is related to an ig cat list XSS in the icegram plugin for WordPress. Recommendations: For versions prior to 1.10.29, update to version 1.10.29 or later to resolve...
The App Creeping on Your IG Location, Jakarta’s Insurance Crisis, and More News
Catch up on the most important news from today in two minutes or less...
ig-passivhaus.de XSS vulnerability
Open Bug Bounty ID: OBB-698030 Description| Value ---|--- Affected Website:| ig-passivhaus.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
ig-bac.de XSS vulnerability
Open Bug Bounty ID: OBB-660319 Description| Value ---|--- Affected Website:| ig-bac.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ig-sinnersdorf.de XSS vulnerability
Open Bug Bounty ID: OBB-637374 Description| Value ---|--- Affected Website:| ig-sinnersdorf.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Human Followers for IG Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Human Followers for IG Prank published at the 'play' market has multiple vulnerabilities...
Followers Master for IG Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Followers Master for IG Prank published at the 'play' market has multiple vulnerabilities...
Get Followers for IG - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Get Followers for IG published at the 'play' market has multiple vulnerabilities...
IG Metall InfoApp - External URLs, Suspicious files, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application IG Metall InfoApp published at the 'play' market has multiple vulnerabilities...
IG Trading - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application IG Trading published at the 'play' market has multiple vulnerabilities...
IG BCE Schichtkalender BASF SE - MIT license, WebView JavaScript enabled, WebView files access vulnerabilities
HackApp vulnerability scanner discovered that application IG BCE Schichtkalender BASF SE published at the 'play' market has multiple vulnerabilities...
Remote Command Execution Vulnerability in the IG_dir Parameter in Kingsoft KingGate Firewall schedule.php Page
KingGate Firewall is a firewall product. A remote command execution vulnerability exists in the IGdir parameter in the schedule.php page of Kingsoft KingGate Firewall. It allows an attacker to execute system commands by submitting a POST request as: IGoperation=IGdelete&IGcheckbox=1...
Cross site scripting
Cross-site scripting XSS vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter...