Lucene search
+L

989 matches found

NVD
NVD
•added 2019/09/14 4:15 p.m.•38 views

CVE-2019-16294

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

7.8CVSS7.8AI score0.09832EPSS
SaveExploits2References4
Mend
Mend
•added 2019/09/14 3:39 p.m.•6 views

CVE-2019-16294

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

8.5CVSS0.09832EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2019/09/14 3:39 p.m.•46 views

CVE-2019-16294

SciLexer.dll in Scintilla in Notepad++ x64 before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file...

7.9AI score0.09832EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2019/09/14 12:00 a.m.•22 views

PT-2019-3959 · Notepad++ · Notepad++

Name of the Vulnerable Software and Affected Versions: Notepad++ versions prior to 7.7 Description: The issue is related to insufficient input validation in the SciLexer.dll component of the Scintilla text editing component in Notepad++. This can be exploited by a remote attacker using a speciall...

7.8CVSS7.7AI score0.09832EPSS
SaveExploits2References10
CNVD
CNVD
•added 2019/07/19 12:00 a.m.•22 views

ML Code Injection Vulnerability

Discuz!ML is an open source community forum system based on the Discuz!X engine. A security vulnerability exists in Discuz!ML version 3.2 to 3.4. A remote attacker can exploit this vulnerability to execute arbitrary PHP code...

9.8CVSS7.6AI score0.04572EPSS
SaveExploits3References1
NVD
NVD
•added 2019/07/18 6:15 p.m.•44 views

CVE-2019-13956

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

9.8CVSS9.8AI score0.04572EPSS
SaveExploits3References1
Prion
Prion
•added 2019/07/18 6:15 p.m.•37 views

Code injection

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

7.5CVSS9.7AI score0.04572EPSS
SaveExploits3References1Affected Software1
CVE
CVE
•added 2019/07/18 5:23 p.m.•124 views

CVE-2019-13956

Discuz!ML versions 3.2–3.4 are affected by a code-injection vulnerability in the language cookie. The root cause is improper handling of the language cookie value, allowing remote attackers to inject and execute arbitrary PHP code (for example via language=en'.phpinfo().');, enabling remote code ...

9.8CVSS9.7AI score0.04572EPSS
SaveExploits3References1Affected Software1
Cvelist
Cvelist
•added 2019/07/18 5:23 p.m.•50 views

CVE-2019-13956

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

9.8AI score0.04572EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/18 12:00 a.m.•9 views

CVE-2019-13956: Improper Control of Generation of Code

Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH40df5language=en to 4gH40df5language=en'.phpinfo.'; if the random prefix 4gH40df5 were used...

9.8CVSS6.4AI score0.04572EPSS
SaveExploits3References2
myhack58
myhack58
•added 2019/07/11 12:00 a.m.•161 views

Discuz! ML arbitrary code execution vulnerability alerts-a vulnerability alert-the black bar safety net

2019 Year 7 month 11 days, the network appeared on a Discuz it! ML remote code execution vulnerability PoC, through Sangfor security researcher to verify the analysis found, the attacker can use the vulnerability in the request flow of the cookie field in the language parameter to insert arbitrar...

0.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/07/11 12:00 a.m.•45 views

Discuz!ML 3.x Arbitrary Code Execution Vulnerability

Discuz!ML is a multilingual open source community system based on the Discuz!X engine. An arbitrary code execution vulnerability exists in Discuz!ML 3.x, which can be exploited by attackers to execute arbitrary code...

8.2AI score
SaveExploits0References1
Vulnerability Lab
Vulnerability Lab
•added 2019/07/08 12:00 a.m.•878 views

Discuz!ML v3.x - Code Injection Vulnerability

Document Title: =============== Discuz!ML v3.x - Code Injection Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2185 Download: https://www.vulnerability-lab.com/resources/documents/2185.rar http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13956...

7.5CVSS0.3AI score0.04572EPSS
SaveExploits3
Vulnerability Lab
Vulnerability Lab
•added 2019/07/07 12:00 a.m.•137 views

Discuz!ML v3.x - Code Injection Vulnerability

Document Title: =============== Discuz!ML v3.x - Code Injection Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2185 Download: https://www.vulnerability-lab.com/resources/documents/2185.rar http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13956...

9.8CVSS9.7AI score0.04572EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•20 views

Aerotech Ensemble ML Servo Drives Detection

Binary data 763918.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•19 views

Aerotech Soloist ML Servo Drives Detection

Binary data 763920.prm...

7.3AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2019/01/08 12:13 p.m.•96 views

Machine Learning to Detect Software Vulnerabilities

No one doubts that artificial intelligence AI and machine learning ML will transform cybersecurity. We just don't know how, or when. While the literature generally focuses on the different uses of AI by attackers and defenders ­ and the resultant arms race between the two ­ I want to talk about...

7.4AI score
SaveExploits0
OSV
OSV
•added 2018/12/28 4:29 p.m.•14 views

CVE-2018-5204

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

9.8CVSS6AI score0.0234EPSS
SaveExploits0References1
NVD
NVD
•added 2018/12/28 4:29 p.m.•22 views

CVE-2018-5204

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

9.8CVSS9.7AI score0.0234EPSS
SaveExploits0References1
Prion
Prion
•added 2018/12/28 4:29 p.m.•20 views

Design/Logic Flaw

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

7.5CVSS9.6AI score0.0234EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder