Lucene search
K

3296 matches found

Kitploit
Kitploit
added 2016/10/04 2:12 p.m.20 views

Sandcat Browser 5.3 - PenTest Oriented Web Browser

Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and pen-testers and...

7.4AI score
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2016/08/22 12:0 a.m.31 views

openSUSE Security Update : pdns (openSUSE-2016-1004)

This update for pdns fixes the following issues : - CVE-2016-6172: malicious primary DNS servers can crash secondaries through large transfers boo987872 As mitigation, the xfr-max-received-mbytes config option was added, defaulting to to 100 MB. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

7.1CVSS6.8AI score0.00019EPSS
Exploits0References2
exploitpack
exploitpack
added 2016/08/03 12:0 a.m.17 views

Wireshark 2.0.0 2.0.4 - CORBA IDL Dissectors Denial of Service

Wireshark 2.0.0 2.0.4 - CORBA IDL Dissectors Denial of Service GIOP capture Build Information: Version 2.0.3 v2.0.3-0-geed34f0 from master-2.0 Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions...

0.4AI score
Exploits0
myhack58
myhack58
added 2016/08/02 12:0 a.m.33 views

World Of Warcraft recruitment: a command line can hijack your game with the hijacking code and video-bug warning-the black bar safety net

! Recently there has been a relates to the social worker, the technology, the new game attack of the Scam, the attacker uses the world of Warcraft World of Warcraft, WoW game plug-in a hidden function. New attacks Imagine this Scene: the game one looks like a well-known Guild members of a role,...

0.9AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.1 views

The vulnerability of the Redis database management system allows a hacker to execute arbitrary Lua bytecode.

The vulnerability of the deps/lua/src/ldo.c component of the Redis database management system is related to incorrect data type conversion. Exploiting this vulnerability allows a malicious actor to execute any Lua bytecode using a specially crafted eval command...

10CVSS6.3AI score0.08757EPSS
Exploits2References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.1 views

The vulnerability of the Apache HTTP Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The status of the competition in the modstatus module of the Apache HTTP Server allows malicious actors operating remotely to trigger service failures overflow of buffers in dynamic memory, gain access to confidential information, or execute arbitrary code through a specially crafted request. Thi...

6.8CVSS7.2AI score0.75444EPSS
Exploits4References2Affected Software1
Positive Technologies
Positive Technologies
added 2016/06/23 12:0 a.m.3 views

PT-2020-15714 · Luajit +2 · Luajit +2

Name of the Vulnerable Software and Affected Versions: LuaJIT versions prior to 2.1.0-beta3 Description: The issue is related to an out-of-bounds read in the lj err run function located in lj err.c. Recommendations: For LuaJIT versions prior to 2.1.0-beta3, at the moment, there is no information...

9.8CVSS6.7AI score0.01141EPSS
Exploits5References20
OSV
OSV
added 2016/04/13 3:59 p.m.1 views

ALPINE-CVE-2015-8080

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

7.5CVSS7.8AI score0.06469EPSS
Exploits1References1
OSV
OSV
added 2016/04/13 3:59 p.m.1 views

DEBIAN-CVE-2015-8080

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

7.5CVSS7.4AI score0.06469EPSS
Exploits1References1
OSV
OSV
added 2016/04/13 3:59 p.m.0 views

UBUNTU-CVE-2015-8080

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

7.5CVSS7.3AI score0.06469EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2016/04/13 3:59 p.m.28 views

CVE-2015-8080

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

7.5CVSS7.1AI score0.06469EPSS
Exploits1References2
Prion
Prion
added 2016/04/13 3:59 p.m.30 views

Integer overflow

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

5CVSS7.9AI score0.06469EPSS
Exploits1References12Affected Software5
CVE
CVE
added 2016/04/13 3:0 p.m.177 views

CVE-2015-8080

CVE-2015-8080 is an in Redis where the getnum function in lua_struct.c can overflow an integer if a Lua script processes a large number. Affects Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6. The described impact is memory corruption and application crash, with potential sandbox circumvention....

7.5CVSS8AI score0.06469EPSS
Exploits1References12Affected Software1
Cvelist
Cvelist
added 2016/04/13 3:0 p.m.29 views

CVE-2015-8080

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

8.1AI score0.06469EPSS
Exploits1References12
AlpineLinux
AlpineLinux
added 2016/04/13 3:0 p.m.43 views

CVE-2015-8080

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

7.5CVSS8.2AI score0.06469EPSS
Exploits1
Debian CVE
Debian CVE
added 2016/04/13 3:0 p.m.29 views

CVE-2015-8080

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

7.5CVSS7.7AI score0.06469EPSS
Exploits1
Check Point Advisories
Check Point Advisories
added 2016/02/29 12:0 a.m.3 views

Redis Lua Scripting Component getnum Integer Overflow (CVE-2015-8080)

An integer overflow vulnerability has been reported in Redis. This vulnerability is due to the vulnerable server incorrectly parsing specific Lua scripts. A remote authenticated attacker can exploit this vulnerability by sending a specially crafted RESP message to the target server. Successful...

5CVSS3.3AI score0.06469EPSS
Exploits1
Fedora
Fedora
added 2016/02/05 9:24 p.m.30 views

[SECURITY] Fedora 23 Update: prosody-0.9.10-1.fc23

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

5.3CVSS2.7AI score0.00681EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2016/02/01 9:4 p.m.37 views

Moderate: Red Hat Security Advisory: redis security advisory

Updated redis packages that fix a security issue are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

7.5CVSS6.8AI score0.06469EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2016/02/01 9:3 p.m.35 views

Moderate: Red Hat Security Advisory: redis security advisory

Updated redis packages that fix a security issue are now available for Red Hat Enterprise Linux OpenStack Platform 7.0. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

7.5CVSS6.8AI score0.06469EPSS
Exploits1References2
Rows per page
Query Builder