Lucene search
+L

2847 matches found

Prion
Prion
added 2017/08/27 4:29 p.m.15 views

Code injection

In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree...

6.4CVSS7.2AI score0.01058EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2017/08/02 12:00 a.m.30 views

Tinyproxy main.c File Denial of Service Vulnerability

Tinyproxy is a small HTTP proxy program available for Windows, Linux and Unix systems. A security vulnerability exists in the main.c file in Tinyproxy 1.8.4 and earlier versions. A local attacker can exploit this vulnerability to terminate arbitrary processes...

5.5CVSS5.2AI score0.00292EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2017/07/22 5:54 p.m.13 views

cola.kku.ac.th XSS vulnerability

Vulnerable URL: http://cola.kku.ac.th/main/page.php?id=177?%22%27--!%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E〈=en Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

6.3AI score
SaveExploits0
OSV
OSV
added 2017/07/20 5:29 p.m.9 views

CVE-2017-0378

XSS exists in the loginform function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATHINFO to main.php...

6.1CVSS5.8AI score
SaveExploits0References5
OSV
OSV
added 2017/07/20 5:29 p.m.30 views

UBUNTU-CVE-2017-0378

XSS exists in the loginform function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATHINFO to main.php...

6.1CVSS6.4AI score0.01455EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2017/07/20 12:00 a.m.15 views

The vulnerability of the PHP interpreter allows attackers to trigger a service failure for the central processor.

The vulnerability of the PHP interpreter is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a failure in the central processor’s service by injecting long variables related to main/phpvariables.c...

7.8CVSS6.6AI score0.08255EPSS
SaveExploits0References7Affected Software1
CNVD
CNVD
added 2017/07/11 12:00 a.m.13 views

PHP Denial of Service Vulnerability (CNVD-2017-22591)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability exists in the main/phpvariables.c file in PHP versions prior to 5.6.31, 7.x versions prior to 7.0.17, and 7.1.x version...

7.8CVSS7.5AI score0.08255EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2017/06/19 12:00 a.m.24 views

GNU binutils - disassemble_bytes Heap Overflow

GNU binutils - disassemblebytes Heap Overflow Source: https://sourceware.org/bugzilla/showbug.cgi?id=21580 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

7.4AI score
SaveExploits0
zdt
zdt
added 2017/06/19 12:00 a.m.70 views

GNU binutils - decode_pseudodbg_assert_0 Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Source: https://sourceware.org/bugzilla/showbug.cgi?id=21586 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

6.8CVSS8.8AI score0.08506EPSS
SaveExploits2
zdt
zdt
added 2017/06/19 12:00 a.m.69 views

GNU binutils - disassemble_bytes Heap Overflow Exploit

Exploit for linux platform in category dos / poc Source: https://sourceware.org/bugzilla/showbug.cgi?id=21580 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

6.8CVSS6.8AI score0.08544EPSS
SaveExploits2
Openbugbounty
Openbugbounty
added 2017/06/18 6:05 a.m.14 views

icecreamproducts.com XSS vulnerability

Vulnerable URL: http://www.icecreamproducts.com/MainContentGuest.php?value=1/-///'/"//--...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/06/14 5:33 p.m.12 views

hammhrc.org XSS vulnerability

Open Bug Bounty ID: OBB-247987 Description| Value ---|--- Affected Website:| hammhrc.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2017/06/05 10:17 p.m.37 views

FBI Arrests NSA Contractor for Leaking Secrets – Here's How they Caught Her

The FBI arrested a 25-year-old NSA contractor on Saturday 3rd June for leaking classified information to an online news outlet which published its report yesterday 5th June — meaning the arrest was made two days before the actual disclosure went online. Reality Leigh Winner, who held a top-secret...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/06/02 12:00 a.m.15 views

The vulnerability of the kvm_ioctl_create_device function in the Linux operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the kvmioctlcreatedevice function in the virt/kvm/kvmmain.c file of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service failures or increase their privileges through special...

10CVSS6.6AI score0.10177EPSS
SaveExploits0References17Affected Software1
Openbugbounty
Openbugbounty
added 2017/05/25 7:58 a.m.13 views

pkusd.org XSS vulnerability

Vulnerable URL: http://www.pkusd.org/main/cp.php?"'--!confirmOPENBUGBOUNTY...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2017/05/09 12:00 a.m.12 views

Zen Cart Cross-Site Scripting Vulnerability (CNVD-2017-08298)

Zen Cart is an open source shopping cart system developed by Zen Cart team. The system is mainly used to establish an online store , can support a variety of payment methods , multi-language options , online shopping mall batch update and so on. A cross-site scripting vulnerability exists in the...

6.1CVSS6.2AI score0.00683EPSS
SaveExploits1References1
OSV
OSV
added 2017/05/08 6:29 a.m.13 views

CVE-2017-8833

Zen Cart 1.6.0 has XSS in the mainpage parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."...

6.1CVSS5.8AI score0.00683EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
added 2017/04/28 3:31 p.m.11 views

cmdbet.com XSS vulnerability

Vulnerable URL: http://www.cmdbet.com/Main/logout.aspx?code='-confirmOPENBUGBOUNTY-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 446225 VIP website status:| No Coordinated...

6.3AI score
SaveExploits0
CNVD
CNVD
added 2017/04/18 12:00 a.m.7 views

Zendo Project Management Software Open Source 9.1.1 SQL Injection Vulnerability

Zendo is an open source project management software. Zendo Project Management Software Open Source 9.1.1 SQL injection vulnerability exists in module\block\control.php page. Due to the lack of filtering of the 'main' parameter, allowing attackers to exploit the vulnerability to obtain sensitive...

7.9AI score
SaveExploits0
n0where
n0where
added 2017/04/03 4:13 p.m.31 views

WMI Based Agentless Post-Exploitation PowerShell RAT: WMImplant

WMImplant is a PowerShell based tool that leverages WMI to both perform actions against targeted machines, but also as the C2 channel for issuing commands and receiving results. WMImplant will likely require local administrator permissions on the targeted machine. It is designed to run both...

0.3AI score
SaveExploits0References1
Rows per page
Query Builder