Lucene search
+L

3935 matches found

Kitploit
Kitploit
•added 2015/01/12 11:28 p.m.•33 views

Instant PDF Password Protector - Password Protect PDF file

Instant PDF Password Protector is the Free tool to quickly Password Protect PDF file on your system. With a click of button, you can lock or protect any of your sensitive/private PDF documents. You can also use any of the standard Encryption methods - RC4/AES 40-bit, 128-bit, 256-bit based upon t...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2015/01/08 12:00 a.m.•18 views

Easewe FTP OCX Arbitrary File Execution Vulnerability

Easewe FTP OCX is easy to use ftp activex component that supports all standard ftp features. Easewe FTP OCX version 4.5.0.9 EaseWeFtp.FtpLibrary ActiveX control in EaseWeFtp.ocx fails to restrict access to certain methods, allowing remote attackers to exploit a vulnerability to execute arbitrary...

7.5CVSS7.5AI score0.01402EPSS
SaveExploits1References1
Cisco
Cisco
•added 2015/01/07 10:46 p.m.•60 views

Cisco Jabber Guest Server Cross-Site Scripting Vulnerability

Cisco Jabber Guest Server contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some parameters...

4.3CVSS5.7AI score0.01792EPSS
SaveExploits0References1
NVD
NVD
•added 2014/12/19 11:59 a.m.•24 views

CVE-2014-7241

The TSUTAYA application 5.3 and earlier for Android allows remote attackers to execute arbitrary Java methods via a crafted HTML document...

6.8CVSS7.3AI score0.02016EPSS
SaveExploits0References3
CVE
CVE
•added 2014/12/19 11:00 a.m.•57 views

CVE-2014-7241

The CVE-2014-7241 issue affects the TSUTAYA App for Android (versions 5.3 and earlier). A vulnerability allows a remote attacker to cause arbitrary Java method execution by presenting a crafted HTML document. This is documented across multiple sources (NVD, CNVD, JVN) and is mitigated by updating...

6.8CVSS7.5AI score0.02016EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/19 12:00 a.m.•5 views

CVE-2014-7241: Improper Input Validation

The TSUTAYA application 5.3 and earlier for Android allows remote attackers to execute arbitrary Java methods via a crafted HTML document...

6.8CVSS6.3AI score0.02016EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/12/19 12:00 a.m.•4 views

PT-2014-7850

Name of the Vulnerable Software and Affected Versions TSUTAYA application versions 5.3 and earlier Description The issue allows remote attackers to execute arbitrary Java methods via a crafted HTML document. Recommendations For versions 5.3 and earlier, at the moment, there is no information abou...

6.8CVSS0.02016EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2014/12/17 12:00 a.m.•15 views

PT-2020-7585 · Dbi +3 · Dbi +3

Name of the Vulnerable Software and Affected Versions: DBI module versions prior to 1.632 for Perl Description: An issue in the DBI module for Perl may lead to memory corruption when using many arguments to methods for Callbacks. Recommendations: For versions prior to 1.632, update to version 1.6...

6.1CVSS6.6AI score0.02738EPSS
SaveExploits0References35
Kitploit
Kitploit
•added 2014/12/05 6:14 p.m.•42 views

zANTI 2.0 - Android Network Toolkit

zANTI is a mobile penetration testing toolkit that lets security managers assess the risk level of a network with the push of a button. This easy to use mobile toolkit enables IT Security Administrators to simulate an advanced attacker to identify the malicious techniques they use in the wild to...

7.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2014/12/04 12:00 a.m.•38 views

PTC IsoView Activex Control Multiple Animation Methods Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the PTC IsoView ActiveX control. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS7AI score0.03448EPSS
SaveExploits0References1
ThreatPost
ThreatPost
•added 2014/11/17 1:17 p.m.•22 views

Visa, MasterCard Remove Passwords from 3D Secure

Payment giants Visa and MasterCard announced plans to eliminate the need for password authentication in the companies’ respective “Verified by Visa” and “SecureCode” payment platforms which are designed to add an additional layer of security to online transactions. In a press release, MasterCard...

1.1AI score
SaveExploits0
Hacker One
Hacker One
•added 2014/11/05 11:36 a.m.•22 views

X (Formerly Twitter): Options Method Enabled

Vuln Details: Domain: https://vine.co/ I detected that OPTIONS method is allowed. This issue is reported as extra information. Impact: Information disclosed from this page can be used to gain additional information about the target system Remedy: Disable OPTIONS method in all production systems...

6.8AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2014/11/04 9:55 a.m.•18 views

Smartphone Owners Lack Motivation to Adequately Lock Devices

A quarter of smartphone owners don’t lock their devices because they don’t believe they have any data worth protecting. Even more refrain from doing it because they feel like it’s too much of a hassle. That’s at least according to a new study carried out by six researchers, four from the Universi...

6.9AI score
SaveExploits0References1
Drupal
Drupal
•added 2014/10/29 12:00 a.m.•23 views

SA-CONTRIB-2014-106 - Commerce Authorize.Net SIM/DPM Payment Methods - Access Bypass

This module provides payment methods for the Drupal Commerce package to permit the use of the Authorize.Net payment gateway's SIM and DPM payment protocols. Access Bypass The module doesn't sufficiently protect the Drupal Commerce order number passed to the Authorize.Net payment gateway, allowing...

7.1AI score
SaveExploits0References13
RedHat Linux
RedHat Linux
•added 2014/10/15 2:09 a.m.•14 views

OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)

Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Hotspot...

5CVSS6.7AI score0.03429EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2014/10/14 8:47 p.m.•18 views

OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)

Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Hotspot...

5CVSS6.7AI score0.03429EPSS
SaveExploits0References5
NVD
NVD
•added 2014/10/06 2:55 p.m.•36 views

CVE-2014-0168

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...

6.8CVSS7.2AI score0.00739EPSS
SaveExploits1References2
Prion
Prion
•added 2014/10/06 2:55 p.m.•37 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...

6.8CVSS7.7AI score0.00739EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2014/10/06 2:00 p.m.•44 views

CVE-2014-0168

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...

7.2AI score0.00739EPSS
SaveExploits1References2
Mend
Mend
•added 2014/10/06 2:00 p.m.•3 views

CVE-2014-0168

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...

6.8CVSS0.00739EPSS
SaveExploits1References3
Rows per page
Query Builder