889565 matches found
Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll
A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll. id: CVE-2024-0801 info: name: Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll author: daffainfo severity: high description: | A denial of service vulnerability exists i...
Mitel MiCollab - Information Disclosure & Denial of Service
Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 contain a vulnerability in the TP-240 component caused by improper handling, letting remote attackers obtain sensitive information and cause denial of service, exploit requires remote access. id: CVE-2022-26143 info: name:...
XiongMai uc-httpd 1.0.0 - Buffer Overflow
Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....
Cisco Unified IP Conference Station 7937G - Denial-of-Service
Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to restart the device remotely via specially crafted packets that can cause a denial-of-service condition. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned...
Apache Struts XWork - XML External Entity Injection
Apache Struts 2.0.0 2.2.1 and 2.2.1 = versions = 6.1.0 contain an XML external entity injection caused by missing XML validation, letting attackers potentially disclose files or cause denial of service, exploit requires crafted XML input id: CVE-2025-68493 info: name: Apache Struts XWork - XML...
TimeKeeper by FSMLabs - Remote Code Execution
An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. Some query parameters are passed directly in the URL and named argx, with x an integer starting from 1; it is possible t...
ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure
ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...
ProjectSend <= r1605 - Improper Authorization
An improper authorization check was identified within ProjectSend version r1605 that allows an attacker to perform sensitive actions such as enabling user registration and auto validation, or adding new entries in the whitelist of allowed extensions for uploaded files. Ultimately, this allows to...
Microsoft FrontPage Extensions - Information Disclosure
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...
Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection
Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php. This in turn can lead to...
React Server Components - Denial of Service
React Server Components 19.0.0 to 19.2.1 including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack contain an insecure deserialization vulnerability caused by unsafe payload deserialization in Server Function endpoints, letting unauthenticated attackers cause...
CVE-2021-41773-PoC
CVE-2021-41773-PoC PoC für CVE-2021-41773 mit Docker zur Demonstration Ausführen Führen Sie einfach ./poc.sh aus. Stellen Sie sicher, dass docker und docker-compose funktionieren. $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1...
CVE-2020-3433
PoCs für CVE-2020-3433, CVE-2020-3434 und CVE-2020-3435 PoCs und technische Details zu den drei Schwachstellen, die im Mai 2020 im Cisco AnyConnect Secure Mobility Client für Windows gefunden wurden: CVE-2020-3433 – Hoch CVSS-Score 7.8 – eine lokale Privilegienausweitung CVE-2020-3434 – Mittel...
CrackKeyIso
CVE 2023 28229 Windows CNG KeyIso RPC EoP/SBX Entdeckt von: @k0shl - @Y3A Nur zu Bildungszwecken!...
CVE-2022-40363
CVE-2022-40363 Ein Pufferüberlauf in der Komponente nfcdeviceloadmifareuldata von Flipper Devices Inc., Flipper Zero vor v0.65.2, ermöglicht es Angreifern, eine Denial-of-Service DoS durch eine manipulierte NFC-Datei zu verursachen. authentication| complexity| vector ---|---|--- nicht verfügbar|...
killasa
killasa Schwachstellentest für CVE-2016-1287 Cisco ASA ungültige IKE-Fragmentlänge Verhandelt eine IKEv2-SA bei aktivierter Cisco-Fragmentierung und sendet anschließend zwei IKE-Fragmente, von denen eines eine ungültige Länge von 1 Oktett aufweist...
CVE-2022-1015-1016
CVE-2022-1015 & CVE-2022-1026 Diese README.md ist eine Übersetzung von Davids Blog. David fand die CVE-1015 und CVE-1016 im Linux-Kernel. Du kannst seine Webseite besuchen, um das Originaldokument zu lesen. Hier sind seine Social-Media-Profile: Twitter Github Eine Analyse der zwei neuen...
CVE
Repository für Proof-of-Concept-Exploits Dieses Repository enthält meine eigene Sammlung von Proof-of-Concept-Exploits PoC, die für Sicherheitstests und Forschungszwecke erstellt wurden. Jeder Ordner ist nach CVE-Kennung organisiert zum Beispiel: CVE-2025-XXXX/, und darin finden Sie den...