Lucene search
+L

55 matches found

GithubExploit
GithubExploit
added 2025/07/03 8:02 p.m.411 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-6543CitrixNetScalerPoC Multi-host, multi-port scann...

9.8CVSS7.4AI score0.10094EPSS
SaveExploits4
RedHat Linux
RedHat Linux
added 2024/05/30 8:24 p.m.12 views

io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx

A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP client establishes connections to different hosts, triggering the memory leak. The leak can be accelerated with intimate runtime knowledge,...

6.5CVSS7.2AI score0.01653EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2024/03/08 12:00 a.m.23 views

Fedora: Security Advisory for frysk (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02578EPSS
SaveExploits3References2
Fedora
Fedora
added 2024/03/07 10:33 p.m.26 views

[SECURITY] Fedora 40 Update: frysk-0.4-94.fc40

Frysk is an execution-analysis technology implemented using native Java and C++. It is aimed at providing developers and sysadmins with the ability to both examine and analyze running multi-host, multi-process, multi-threaded systems. Frysk allows the monitoring of running processes and threads, ...

8.8CVSS6.8AI score0.02578EPSS
SaveExploits3
OSV
OSV
added 2021/07/01 5:02 p.m.48 views

GHSA-2CC5-23R7-VC4V Ratpack's default client side session signing key is highly predictable

Impact The client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not also used which is recommended, but is not on by default, the session data could be tampered with by someone with...

4.4CVSS4.5AI score0.00262EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/07/01 5:02 p.m.77 views

Ratpack's default client side session signing key is highly predictable

Impact The client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not also used which is recommended, but is not on by default, the session data could be tampered with by someone with...

4.4CVSS0.5AI score0.00262EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2021/06/29 7:15 p.m.21 views

Default configuration

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not also used which is recommended, but is n...

3.5CVSS4AI score0.00262EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/06/29 6:15 p.m.42 views

CVE-2021-29480 Default client side session signing key is highly predictable

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not also used which is recommended, but is n...

4.4CVSS4.9AI score0.00262EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2016/02/11 12:00 a.m.30 views

Mihalism Multi Host 5.0.3 Cross Site Request Forgery / Cross Site Scripting

================================================================================ Mihalism Multi Host v5.0.3 Xss-Csrf ================================================================================ Vendor Homepage: www.mihalism.net Date: 10/02/2016 Version : v5.0.3 Author: Ashiyane Digital Securi...

SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

Mihalism Multi Host 4.0.0 - Upload Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2012/09/02 12:00 a.m.103 views

Exploit Title: Mihalism Multi Host v 5.0

Exploit Title: Mihalism Multi Host v 5.0 Google Dork: intext:"powered by Mihalism Multi Host" Date: 2012/8/25 Discovered By : Explo!ter Software Link: http://www.mihalismscript.com/ Version: 5.0 Tested on: Linux Contact : Emperor-team.org Spt to : Stokke Details : ++++++++++++++++++++++++++ the...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2012/08/27 12:00 a.m.28 views

Mihalism Multi Host 5.0 Cross Site Scripting

Exploit Title: Mihalism Multi Host v 5.0 Google Dork: intext:"powered by Mihalism Multi Host" Date: 2012/8/25 Discovered By : Explo!ter Software Link: http://www.mihalismscript.com/ Version: 5.0 Tested on: Linux Contact : Emperor-team.org Spt to : Stokke Details : ++++++++++++++++++++++++++ the...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/08/25 12:00 a.m.38 views

Mihalism Multi Host - 'users.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55237/info Mihalism Multi Host is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2012/08/25 12:00 a.m.16 views

Mihalism Multi Host - users.php Cross-Site Scripting

Mihalism Multi Host - users.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55237/info Mihalism Multi Host is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

6.8AI score
SaveExploits0
exploitpack
exploitpack
added 2010/04/14 12:00 a.m.31 views

Mihalism Multi Host 4.0.0 - Arbitrary File Upload

Mihalism Multi Host 4.0.0 - Arbitrary File Upload ======================================================================================== | Title : Mihalism Multi Host V 4.0.0 Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...

0.4AI score
SaveExploits0
zdt
zdt
added 2010/04/14 12:00 a.m.26 views

Mihalism Multi Host V 4.0.0 Upload Vulnerability

Exploit for php platform in category web applications ================================================ Mihalism Multi Host V 4.0.0 Upload Vulnerability ================================================ ======================================================================================== | Title...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/04/14 12:00 a.m.33 views

Mihalism Multi Host 4.0.0 - Arbitrary File Upload

======================================================================================== | Title : Mihalism Multi Host V 4.0.0 Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://www.p30vel.ir/ | Tested on: windows SP2 Français...

5.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2010/04/01 12:00 a.m.34 views

Mihalism Multi Host 4.0.0 Shell Upload

======================================================================================== | Title : Mihalism Multi Host V 4.0.0 Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...

7.4AI score
SaveExploits0
NVD
NVD
added 2008/02/12 2:00 a.m.21 views

CVE-2008-0714

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lostpasswordgo action...

6.8CVSS8.3AI score0.00949EPSS
SaveExploits1References4
Prion
Prion
added 2008/02/12 2:00 a.m.19 views

Sql injection

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lostpasswordgo action...

6.8CVSS9.1AI score0.00949EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder