Lucene search
+L

762 matches found

NVD
NVD
added 2021/02/10 5:15 p.m.17 views

CVE-2021-0338

In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

5.5CVSS0.00144EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/10 5:15 p.m.5 views

CVE-2021-0338

In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

5.5CVSS6.1AI score0.00144EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/02/10 4:48 p.m.26 views

CVE-2021-0338

In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

5.6AI score0.00144EPSS
SaveExploits0References1
zdt
zdt
added 2021/01/18 12:0 a.m.62 views

Microsoft Spooler Local Privilege Elevation Exploit

This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds...

7.8CVSS8.7AI score0.14179EPSS
SaveExploits10
OSV
OSV
added 2020/12/15 4:15 p.m.8 views

CVE-2020-35395

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...

6.1CVSS6.4AI score0.00846EPSS
SaveExploits1References2
Hacker One
Hacker One
added 2020/12/12 3:28 p.m.92 views

Stripo Inc: Permanent DOS for new users!

Summary: Hi team its me Akash Hamal, and while testing my.stripo.email website which is in scope of your program i was able to DOS permanently any new mail,user which might use your service in future but they won't be able to use ! While registration on my.stripo.email there are three fields...

7.1AI score
SaveExploits0
Cvelist
Cvelist
added 2020/10/08 4:20 a.m.30 views

CVE-2020-3567 Cisco Industrial Network Director Denial of Service Vulnerability

A vulnerability in the management REST API of Cisco Industrial Network Director IND could allow an authenticated, remote attacker to cause the CPU utilization to increase to 100 percent, resulting in a denial of service DoS condition on an affected device. The vulnerability is due to insufficient...

6.5CVSS6.4AI score0.01154EPSS
SaveExploits0References1
zdt
zdt
added 2020/09/17 12:0 a.m.79 views

Microsoft Spooler Local Privilege Elevation Exploit

This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds...

7.8CVSS0.7AI score0.16502EPSS
SaveExploits10
Packet Storm
Packet Storm
added 2020/09/17 12:0 a.m.501 views

Microsoft Spooler Local Privilege Elevation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Spooler Local Privilege Elevation Vulnerability', 'Description' = %q This exploit leverages a file write vulnerability in the print...

7.2CVSS0.5AI score0.16502EPSS
SaveExploits10
CNVD
CNVD
added 2020/03/25 12:0 a.m.5 views

Unspecified Vulnerability in Gallery for Samsung Mobile Devices

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Gallery for Samsung mobile devices, which can be exploited by an attacker to permanently disable the Gallery application...

7.5CVSS6.6AI score0.00415EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/24 8:15 p.m.6 views

CVE-2019-20604

An issue was discovered on Samsung mobile devices with O8.x software. Attackers can disable Gallery permanently. The Samsung ID is SVE-2019-14031 May 2019...

7.5CVSS7.1AI score0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/03/24 7:15 p.m.28 views

CVE-2019-20604

An issue was discovered on Samsung mobile devices with O8.x software. Attackers can disable Gallery permanently. The Samsung ID is SVE-2019-14031 May 2019...

7.6AI score0.00415EPSS
SaveExploits0References1
NVD
NVD
added 2020/02/12 1:15 a.m.31 views

CVE-2014-2595

Barracuda Web Application Firewall WAF 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string...

9.8CVSS9.6AI score0.16868EPSS
SaveExploits3References7
Prion
Prion
added 2020/02/12 1:15 a.m.25 views

Authentication flaw

Barracuda Web Application Firewall WAF 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string...

7.5CVSS7.4AI score0.16868EPSS
SaveExploits3References7Affected Software1
Cvelist
Cvelist
added 2020/02/12 12:45 a.m.41 views

CVE-2014-2595

Barracuda Web Application Firewall WAF 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string...

9.7AI score0.16868EPSS
SaveExploits3References7
ThreatPost
ThreatPost
added 2019/12/03 5:18 p.m.202 views

Critical Android Flaw Leads to 'Permanent DoS’

Google has released an update stomping out three critical-severity vulnerabilities in its Android operating system — one of which could result in “permanent denial of service” on affected mobile devices if exploited. The vulnerabilities are part of Google’s December 2019 Android Security Bulletin...

10CVSS1.3AI score0.06342EPSS
SaveExploits2References8
ThreatPost
ThreatPost
added 2019/11/14 5:13 p.m.59 views

Just-Released Checkra1n iPhone Jailbreak Stirs Security Concerns

With the checkra1n iPhone jailbreak now available, security experts are urging mobile-device managers to keep on their toes as the powerful new tool becomes available to hackers and iPhone users who may recklessly use it. Jailbreaking is the process of hacking these devices to bypass DRM...

0.3AI score
SaveExploits0References11
The Hacker News
The Hacker News
added 2019/09/27 1:29 p.m.5 views

Hacker Releases 'Unpatchable' Jailbreak For All iOS Devices, iPhone 4s to iPhone X

An iOS hacker and cybersecurity researcher today publicly released what he claimed to be a "permanent unpatchable bootrom exploit," in other words, an epic jailbreak that works on all iOS devices ranging from iPhone 4s A5 chip to iPhone 8 and iPhone X A11 chip. Dubbed Checkm8, the exploit leverag...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2019/09/27 1:29 p.m.169 views

Hacker Releases 'Unpatchable' Jailbreak For All iOS Devices, iPhone 4s to iPhone X

An iOS hacker and cybersecurity researcher today publicly released what he claimed to be a "permanent unpatchable bootrom exploit," in other words, an epic jailbreak that works on all iOS devices ranging from iPhone 4s A5 chip to iPhone 8 and iPhone X A11 chip. Dubbed Checkm8, the exploit leverag...

0.2AI score
SaveExploits0
ThreatPost
ThreatPost
added 2019/09/18 2:0 p.m.60 views

Edward Snowden Sued by U.S. Over New Memoir

The U.S. has sued whistleblower Edward Snowden over his new memoir, alleging he published the book in violation of non-disclosure agreements signed with both the CIA and NSA. Edward Snowden, a former employee of the Central Intelligence Agency and contractor for the National Security Agency NSA, ...

6.8AI score
SaveExploits0References10
Rows per page
Query Builder