Lucene search
+L

3554 matches found

The Hacker News
The Hacker News
added 2010/12/05 2:21 a.m.25 views

JavaSnoop-1.0 FINAL - Latest Release

"JavaSnoop is a tool that lets you intercept methods, alter data and otherwise hack Java applications running on your computer." This is the change log for the current release: Added granular logging on the agent still controlled by the main UI menu Fixed Jython/BeanShell bug had to remove...

6.4AI score
SaveExploits0
Cvelist
Cvelist
added 2010/12/03 8:00 p.m.50 views

CVE-2010-4254

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...

7AI score0.13649EPSS
SaveExploits2References13
ThreatPost
ThreatPost
added 2010/11/10 4:38 p.m.14 views

NSA: Our Development Methods Are in the Open Now

WASHINGTON–Despite its reputation for secrecy and technical expertise, the National Security Agency doesn’t have a set of secret coding practices or testing methods that magically make their applications and systems bulletproof. In fact, one of the agency’s top technical experts said that virtual...

7.1AI score
SaveExploits0References2
NVD
NVD
added 2010/11/06 12:00 a.m.32 views

CVE-2009-5015

The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...

7.5CVSS6.5AI score0.01053EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2010/11/06 12:00 a.m.46 views

CVE-2009-5015

The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...

7.5CVSS5.9AI score0.01053EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2010/11/06 12:00 a.m.3 views

CVE-2009-5015

The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...

7.5CVSS5.5AI score0.01053EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2010/11/05 10:00 p.m.56 views

CVE-2009-5015

Removed by vendor...

7.5CVSS7AI score0.01053EPSS
SaveExploits0
Cvelist
Cvelist
added 2010/11/05 10:00 p.m.34 views

CVE-2009-5015

The URL dispatch mechanism in TurboGears2 aka tg2 before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors...

6.5AI score0.01053EPSS
SaveExploits0References1
erpscan
erpscan
added 2010/09/03 12:00 a.m.19 views

SAP Crystal Reports 2008 — ActiveX Insecure Methods

Application: SAP Crystal Report Server 2008 Versions Affected: SAP Crystal Report Server 2008 Vendor URL: http://www.sap.com Exploits: YES Bugs: Insecure methods Reported: 09.03.2010 Vendor response: 10.03.2010 Date of SAP Security Note Published: 8.10.2010 Date of Public Advisory: 14.01.2011...

7.5AI score
SaveExploits0
Prion
Prion
added 2010/08/11 6:47 p.m.30 views

Design/Logic Flaw

The Common Language Runtime CLR in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote...

9.3CVSS8AI score0.25033EPSS
SaveExploits1References3Affected Software2
RedHat Linux
RedHat Linux
added 2010/08/02 8:43 p.m.12 views

OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from...

9.8CVSS7.8AI score0.96319EPSS
SaveExploits5References5
RedHat Linux
RedHat Linux
added 2010/07/29 4:39 p.m.13 views

OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from...

9.8CVSS7.8AI score0.96319EPSS
SaveExploits5References5
RedHat Linux
RedHat Linux
added 2010/07/21 1:00 a.m.53 views

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

9.8CVSS7.1AI score0.43382EPSS
SaveExploits28References18
Packet Storm
Packet Storm
added 2010/07/06 12:00 a.m.35 views

Bs Scripts_Directory SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs ScriptsDirectory Sqli/Auth Bypass Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author :...

7.4AI score
SaveExploits0
zdt
zdt
added 2010/07/05 12:00 a.m.36 views

Bs General_Classifieds Script Sql injection Vulnerability

Exploit for php platform in category web applications ========================================================= Bs GeneralClassifieds Script Sql injection Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

7.1AI score
SaveExploits0
NVD
NVD
added 2010/06/21 4:30 p.m.28 views

CVE-2010-1168

The Safe aka Safe.pm module before 2.25 for Perl allows context-dependent attackers to bypass intended 1 Safe::reval and 2 Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the a...

7.5CVSS6.9AI score0.03715EPSS
SaveExploits2References18
CVE
CVE
added 2010/06/21 4:00 p.m.106 views

CVE-2010-1168

CVE-2010-1168 affects the Safe (Safe.pm) module in Perl. It allows context-dependent bypass of Safe::reval and Safe::rdo restrictions via implicitly called methods (DESTROY, AUTOLOAD) on implicitly blessed objects, enabling arbitrary code execution. Mitigation in the referenced advisories upgrade...

7.5CVSS7AI score0.03715EPSS
SaveExploits2References18Affected Software1
RedHat Linux
RedHat Linux
added 2010/06/17 9:02 p.m.12 views

OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from...

9.8CVSS7.8AI score0.96319EPSS
SaveExploits5References5
UbuntuCve
UbuntuCve
added 2010/06/15 6:00 p.m.40 views

CVE-2010-2296

The implementation of unspecified DOM methods in Google Chrome before 5.0.375.70 allows remote attackers to bypass the Same Origin Policy via unknown vectors...

9.3CVSS5.9AI score0.01528EPSS
SaveExploits0References1
Prion
Prion
added 2010/06/15 6:00 p.m.28 views

Information disclosure

The implementation of unspecified DOM methods in Google Chrome before 5.0.375.70 allows remote attackers to bypass the Same Origin Policy via unknown vectors...

9.3CVSS6.7AI score0.01528EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder