Lucene search
+L

6787 matches found

GithubExploit
GithubExploit
added 2021/12/14 6:51 a.m.26 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

It is an offensive tool for Apache Solr, exploiting CVE-2021-442...

10CVSS8.6AI score0.99999EPSS
SaveExploits367
GithubExploit
GithubExploit
added 2021/12/14 4:09 a.m.382 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228-Demo This project for prove and testing zero-d...

10CVSS9.6AI score0.99999EPSS
SaveExploits367
GithubExploit
GithubExploit
added 2021/12/13 11:29 a.m.288 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4JExploitation-VulnerabiliyCVE-2021-44228. !Untitled...

10CVSS9.2AI score0.99999EPSS
SaveExploits367
GithubExploit
GithubExploit
added 2021/12/13 11:29 a.m.218 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4JExploitation-VulnerabiliyCVE-2021-44228. !Untitled...

10CVSS9.2AI score0.99999EPSS
SaveExploits367
Openbugbounty
Openbugbounty
added 2021/12/13 8:19 a.m.15 views

arnoba.ir Cross Site Scripting vulnerability OBB-2300724

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/12/13 8:10 a.m.11 views

battlebornbone.com Cross Site Scripting vulnerability OBB-2300705

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2021/12/11 11:00 a.m.165 views

CVE-2021-44228 - Patching is Recommended for Evolving Zero Day Vulnerability in Apache Log4j that allows remote code execution (RCE)

Akamai has been monitoring the rapidly evolving developments of CVE-2021-44228. We have been working closely with our customers and internal application teams to mitigate the risks posed by the threat of unauthorized remote code execution. This includes deploying an update to our existing Apache...

10CVSS4.7AI score0.99999EPSS
SaveExploits367
Imperva Blog
Imperva Blog
added 2021/12/11 2:31 a.m.123 views

How We’re Protecting Customers & Staying Ahead of CVE-2021-44228

CVE-2021-44228 is a high profile vulnerability impacting multiple versions of a widely distributed Java software component, Apache Log4j 2. The specific vulnerability allows for unauthenticated remote code execution. For additional technical information, the team at LunaSec has an excellent...

9.3CVSS1.3AI score0.99999EPSS
SaveExploits367
Rapid7 Blog
Rapid7 Blog
added 2021/12/10 3:30 p.m.211 views

Widespread Exploitation of Critical Remote Code Execution in Apache Log4j

Table of Contents Overview Affected versions Mitigation and detection guidance Rapid7 customers InsightVM and Nexpose InsightIDR and Managed Detection and Response Velociraptor tCell InsightCloudSec IntSights Attacks and campaigns External resources Updates Need clarity on detecting and mitigatin...

9.3CVSS0.2AI score0.99999EPSS
SaveExploits374
Openbugbounty
Openbugbounty
added 2021/12/10 9:20 a.m.12 views

illgen-immobilien.de Cross Site Scripting vulnerability OBB-2298875

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/12/10 5:47 a.m.7 views

dfragd.com Improper Access Control vulnerability OBB-2298582

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Malwarebytes
Malwarebytes
added 2021/12/09 3:18 p.m.83 views

Has your WordPress site been backdoored by a skimmer?

Skimmers and other threat actors are backdooring websites, and WordPress instances in particular, according to a recently released report. Researchers at Sucuri say attackers have developed methods to make sure that their grip on the infected site is not easily removed by applying the next update...

1.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/12/09 7:41 a.m.15 views

facfdz.com Cross Site Scripting vulnerability OBB-2297286

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/12/09 5:18 a.m.71 views

SonicWall Urges Customers to Immediately Patch Critical SMA 100 Flaws

Network security vendor SonicWall is urging customers to update their SMA 100 series appliances to the latest version following the discovery of multiple security vulnerabilities that could be abused by a remote attacker to take complete control of an affected system. The flaws impact SMA 200, 21...

9.8CVSS2.3AI score0.99912EPSS
SaveExploits7
Rapid7 Blog
Rapid7 Blog
added 2021/12/08 6:57 p.m.49 views

Patch Now: SonicWall Fixes Multiple Vulnerabilities in SMA 100 Devices

Summary On December 7, 2021, SonicWall released a security advisory that includes patching guidance for five vulnerabilities in SonicWall SMA 100 series devices that were discovered by Rapid7 including CVE-2021-20038 which is rated CVSSv3 9.8, critical, as well as several other CVEs discovered by...

9CVSS2AI score0.99912EPSS
SaveExploits7
Microsoft Secure
Microsoft Secure
added 2021/12/08 5:00 p.m.277 views

Improve kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center

Windows 10 and Windows 11 have continued to raise the security bar for drivers running in the kernel. Kernel-mode driver publishers must pass the Hardware Lab Kit HLK compatibility tests, malware scanning, and prove their identity through extended validation EV certificates. This has significantl...

7.2CVSS8.8AI score0.07799EPSS
SaveExploits16
Microsoft Malware Protection
Microsoft Malware Protection
added 2021/12/08 5:00 p.m.186 views

Improve kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center

Windows 10 and Windows 11 have continued to raise the security bar for drivers running in the kernel. Kernel-mode driver publishers must pass the Hardware Lab Kit HLK compatibility tests, malware scanning, and prove their identity through extended validation EV certificates. This has significantl...

7.2CVSS8.8AI score0.07799EPSS
SaveExploits16
NVD
NVD
added 2021/12/08 12:15 a.m.36 views

CVE-2021-43808

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting XSS vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is...

6.1CVSS0.00799EPSS
SaveExploits1References8
SonicWall
SonicWall
added 2021/12/07 6:20 p.m.27 views

SonicWall patches multiple SMA100 affected vulnerabilities

SonicWall has verified and patched vulnerabilities of critical and medium severity CVSS 5.3-9.8 in SMA 100 series appliances, which include SMA 200, 210, 400, 410 and 500v products. SMA 100 series appliances with WAF enabled are also impacted by the majority of these vulnerabilities.SonicWall...

9.8CVSS9.6AI score0.99912EPSS
SaveExploits7
Trend Micro Simply Security
Trend Micro Simply Security
added 2021/12/07 12:00 a.m.10 views

Virtual Patching 101

Get the lowdown on virtual patching: a simplified, automated solution to shielding vulnerabilities from exploits...

2.7AI score
SaveExploits0
Rows per page
Query Builder