Lucene search
+L

232 matches found

exploitpack
exploitpack
added 2017/02/18 12:0 a.m.25 views

Joomla! Component Most Wanted Real Estate 1.1.0 - SQL Injection

Joomla! Component Most Wanted Real Estate 1.1.0 - SQL Injection Exploit Title: Joomla! Component Most Wanted Real Estate v1.1.0 - SQL Injection Google Dork: inurl:index.php?option=commostwantedrealestate Date: 18.02.2017 Vendor Homepage: http://mostwantedrealestatesites.com/ Software Buy:...

0.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/12/20 12:0 a.m.28 views

Debian DLA-745-1 : most security update

The most pager can automatically open files compressed with gzip, bzip2 and in Debian LZMA. Alberto Garcia discovered that Debian's version of most was susceptible for a shell injection attack that could be exploited to run arbitrary commands on the user's computer. For Debian 7 'Wheezy', these...

10CVSS8.6AI score0.04828EPSS
Exploits0References3
Debian
Debian
added 2016/12/16 3:7 p.m.62 views

[SECURITY] [DLA 745-1] most security update

Package : most Version : 5.0.0a-2.2 CVE ID : CVE-2016-1253 Debian Bug : 848132 The most pager can automatically open files compressed with gzip, bzip2 and in Debian LZMA. Alberto Garcia discovered that Debians version of most was susceptible for a shell injection attack that could be exploited to...

10CVSS10AI score0.04828EPSS
Exploits0
OSV
OSV
added 2016/12/16 12:0 a.m.14 views

DLA-745-1 most - security update

Bulletin has no description...

10CVSS9.5AI score0.04828EPSS
Exploits0
The Hacker News
The Hacker News
added 2016/09/29 7:7 a.m.8 views

37-Year-Old 'Syrian Electronic Army' Hacker Pleads Guilty in US court

One of the FBI's Most Wanted Hackers who was arrested in Germany earlier this year has pleaded guilty to federal charges for his role in a scheme that hacked computers and targeted the US government, foreign governments, and multiple US media outlets. Peter Romar, 37, pleaded guilty Wednesday in ...

6.7AI score
Exploits0
The Hacker News
The Hacker News
added 2016/04/20 9:28 p.m.22 views

Creators of SpyEye Virus Sentenced to 24 Years in Prison

In Brief Two International hackers, Aleksandr Andreevich Panin and Hamza Bendelladj, have been sentenced to a combined 24 years and 6 months in prison for their roles in developing and distributing SpyEye banking trojan, a powerful botnet similar to the infamous ZeuS malware. Both hackers were...

7.5AI score
Exploits0
The Hacker News
The Hacker News
added 2016/03/24 9:55 p.m.31 views

The 7 Most Wanted Iranian Hackers By the FBI

The Federal Bureau of Investigation FBI has lengthened its Most Wanted List by adding seven Iranian hackers who are accused of attacking a range of US banks and a New York dam. On Thursday, the United States Department of Justice DoJ charged seven Iranian hackers with a slew of computer hacking...

6.8AI score
Exploits0
RedHat Linux
RedHat Linux
added 2016/02/17 5:2 a.m.6 views

chromium-browser: navigation bypass in Chrome Instant

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

4.3CVSS7.5AI score0.01197EPSS
Exploits0References5
CNVD
CNVD
added 2016/02/16 12:0 a.m.13 views

Google Chrome Instant Feature Security Restriction Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in versions prior to Google Chrome 48.0.2564.109 due to the Chrome Instant feature not ensuring that NTP navigation targets are in the most frequently viewed or suggested list. A remote attacker can exploit...

4.3CVSS8.9AI score0.01197EPSS
Exploits0References1
OSV
OSV
added 2016/02/14 2:59 a.m.3 views

CVE-2016-1625

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

4.3CVSS7.3AI score0.01197EPSS
Exploits0References10
OSV
OSV
added 2016/02/14 2:59 a.m.4 views

UBUNTU-CVE-2016-1625

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

4.3CVSS6.8AI score0.01197EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2015/07/01 2:14 a.m.12 views

These Are The FBI's Most Wanted Hackers — Total $4.2 Million Reward

The US State Department and the Federal Bureau of Investigation are willing to pay a total $4.2 Million for information leading to the arrest and/or conviction of top 5 most wanted cyber criminals accused of conducting frauds of hundreds of millions of dollars. Evgeniy Bogachev,30; Nicolae Popesc...

6.6AI score
Exploits0
The Hacker News
The Hacker News
added 2015/02/25 6:38 a.m.19 views

FBI Offers $3 Million Reward For Arrest Of Russian Hacker

The US State Department and the Federal Bureau of Investigation announced Tuesday a $3 Million reward for the information leading to the direct arrest or conviction of Evgeniy Mikhailovich Bogachev, one of the most wanted hacking suspects accused of stealing hundreds of millions of dollars with h...

6.7AI score
Exploits0
Prion
Prion
added 2014/09/09 1:55 a.m.15 views

Information disclosure

The Most Popular Ringtones aka com.bbs.mostpopularringtones application 32 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2014/09/09 1:0 a.m.45 views

CVE-2014-5583

CVE-2014-5583 affects the Android app “The Most Popular Ringtones” (com.bbs.mostpopularringtones) version 32. The vulnerability is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informat...

5.4CVSS6AI score0.00271EPSS
Exploits0References3Affected Software1
The Hacker News
The Hacker News
added 2013/11/06 5:31 p.m.11 views

FBI offering $100,000 reward for information on Most Wanted Cyber Criminals

The US Federal Bureau of Investigation has added five new hackers to its Cyber most wanted list and is seeking information from the public regarding their whereabouts. The men are wanted in connection with hacking and fraud crimes both within the US as well as internationally. Rewards ranging fro...

6.7AI score
Exploits0
The Hacker News
The Hacker News
added 2011/07/26 6:46 p.m.18 views

OSForensics – Digital investigations faster

OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...

7.1AI score
Exploits0
The Hacker News
The Hacker News
added 2011/07/09 8:15 a.m.7 views

XerXes - Most powerful dos tool

XerXes - Most powerful dos tool XerXes is one of the most powerful private dos tool. This tools was used by The Jester to Hits WikiLeaks Site DoS Attack. Get Source Code here : / XerXes - Most powerful dos tool - THN https://www.thehackernews.com / include stdio.h include stdlib.h include string....

6.9AI score
Exploits0
securityvulns
securityvulns
added 2011/02/22 12:0 a.m.89 views

HTB22841: SQL Injection in Comment Rating wordpress plugin

Vulnerability ID: HTB22841 Reference: http://www.htbridge.ch/advisory/sqlinjectionincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: SQL...

0.6AI score
Exploits0
Exploit DB
Exploit DB
added 2010/10/27 12:0 a.m.795 views

DZCP (deV!L`z Clanportal) 1.5.4 - Local File Inclusion

Vulnerability ID: HTB22656 Reference: http://www.htbridge.ch/advisory/lfiindzcp.html Product: DZCP Vendor: dzcp.de http://www.dzcp.de Vulnerable Version: 1.5.4 Vendor Notification: 13 October 2010 Vulnerability Type: Local File Inclusion Status: Fixed by Vendor Risk level: High Credit: High-Tech...

7AI score
Exploits0
Rows per page
Query Builder