Lucene search
+L

2883 matches found

CNVD
CNVD
added 2018/08/28 12:00 a.m.8 views

ASUS DSL-N12E_C1 Remote Command Execution Vulnerability

ASUS DSL-N12EC1 is a wireless router product from ASUS. A remote command execution vulnerability exists in the MainAnalysisContent.asp file in the ASUS DSL-N12EC1 version 1.1.2.3345. A remote attacker can exploit this vulnerability to execute arbitrary operating system commands with the help of...

8.8CVSS9.2AI score0.03747EPSS
SaveExploits1References1
CERT
CERT
added 2018/08/14 12:00 a.m.546 views

IKEv1 Main Mode vulnerable to brute force attacks

Overview Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Description The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. CVE-2018-5389It is well known, that the aggressive mode of IKEv1 PSK is vulnerable...

5.9CVSS5.8AI score0.03038EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
added 2018/07/23 9:03 a.m.14 views

caritas-main-taunus.de XSS vulnerability

Open Bug Bounty ID: OBB-652764 Description| Value ---|--- Affected Website:| caritas-main-taunus.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Vulnerability Lab
Vulnerability Lab
added 2018/07/18 12:00 a.m.69 views

Adobe Systems - Arbitrary Code Injection Vulnerability

Document Title: =============== Adobe Systems - Arbitrary Code Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2120 PSIRT ID: 7873 Vulnerability Magazine:...

7.4AI score
SaveExploits0
attackerkb
attackerkb
added 2018/06/25 4:29 p.m.6 views

CVE-2018-12735

SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inverterinfo.htm or englishmain.htm URI...

7.5CVSS7.3AI score0.01368EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/06/14 12:00 a.m.19 views

The vulnerability of the apply.cgi component in ASUS’ microprogramming software for routers allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the apply.cgi component in ASUS router microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the...

10CVSS5.9AI score0.03557EPSS
SaveExploits3References3Affected Software11
The Hacker News
The Hacker News
added 2018/05/28 8:30 a.m.94 views

Researchers Defeat AMD's SEV Virtual Machine Encryption

German security researchers claim to have found a new practical attack against virtual machines VMs protected using AMD's Secure Encrypted Virtualization SEV technology that could allow attackers to recover plaintext memory data from guest VMs. AMD's Secure Encrypted Virtualization SEV technology...

6.7AI score
SaveExploits0
Hacker One
Hacker One
added 2018/05/14 11:04 a.m.30 views

Reverb.com: XSS in main search, use class tag to imitate Reverb.com core functionality, create false login window

This is an expansion of 349684 which was flagged as a duplicate. In that bug report I explained that several HTML tags end up rendering when entered into the main search. I've since found out that the class attribute of multiple types of tags can be modified to create a realistic imitation of cor...

SaveExploits0
Openbugbounty
Openbugbounty
added 2018/04/29 2:29 p.m.12 views

immo.main-echo.de XSS vulnerability

Open Bug Bounty ID: OBB-610182 Description| Value ---|--- Affected Website:| immo.main-echo.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
OSV
OSV
added 2018/04/04 5:29 p.m.8 views

CVE-2017-13262

In bnepdataind of bnepmain.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1,...

6.5CVSS5.9AI score0.08021EPSS
SaveExploits7References4
OSV
OSV
added 2018/04/02 3:29 a.m.15 views

CVE-2018-9175

DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselectmain.php because code within the database is accessible to uploads/dede/syscacheup.php...

9.8CVSS6.1AI score0.02171EPSS
SaveExploits1References1
attackerkb
attackerkb
added 2018/04/02 3:29 a.m.6 views

CVE-2018-9175

DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselectmain.php because code within the database is accessible to uploads/dede/syscacheup.php...

9.8CVSS6.1AI score0.02171EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2018/03/26 12:00 a.m.9 views

PT-2018-4199 · Intel +1 · Thermal +1

Name of the Vulnerable Software and Affected Versions: thermald affected versions not specified Description: The issue allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid, potentially leading to unauthorized data modification. This is due to a flaw in the main...

6.6CVSS6.3AI score0.0035EPSS
SaveExploits0References7
Prion
Prion
added 2018/03/25 6:29 p.m.20 views

Design/Logic Flaw

dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI...

4.3CVSS6AI score0.00683EPSS
SaveExploits1References1Affected Software1
Openbugbounty
Openbugbounty
added 2018/03/20 9:59 a.m.18 views

main-rutor.org XSS vulnerability

Open Bug Bounty ID: OBB-583033 Description| Value ---|--- Affected Website:| main-rutor.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2018/03/08 7:14 p.m.14 views

mainbeachqueensland.com.au XSS vulnerability

Open Bug Bounty ID: OBB-576594 Description| Value ---|--- Affected Website:| mainbeachqueensland.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
CNVD
CNVD
added 2018/03/08 12:00 a.m.7 views

Denial of Service Vulnerability in SoftZone Office

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. A denial-of-service vulnerability exists in SoftZone Office when opening the main interface of TextMaker.exe. An attacker can exploit the...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2018/02/27 12:00 a.m.6 views

Denial of Service Vulnerability in WPS Office 2016 Personal Edition, Enterprise Edition and Kingsoft pdf (CNVD-2018-04657)

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A denial of service vulnerability exists in WPS Office 2016 Personal Edition, Enterprise...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2018/02/22 12:08 p.m.11 views

main-echo.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-565733 Description| Value ---|--- Affected Website:| main-echo.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

6.7AI score
SaveExploits0
Hacker One
Hacker One
added 2018/02/09 11:36 p.m.62 views

Snapchat: Takeover 2 MAIN DOMAINS of a company Acquired by Snapchat

Hi, As you may realize I noted "Domain" and not subdomain because actually, I was able to take over the MAIN domain of a company Acquired by Snapchat. As you can see in the screenshot below, when you type "Addlive" in Google https://goo.gl/EAxBaj , the first two results will be: F261984 First one...

6.6AI score
SaveExploits0
Rows per page
Query Builder