137 matches found
CVE-2016-10685
pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on...
CVE-2016-10685
CVE-2016-10685 affects pk-app-wonderbox, which downloads binary resources over HTTP, enabling MITM manipulation of requested resources. This can allow an attacker on the same network or with privileged network access to replace the binary with a malicious one, potentially causing remote code exec...
CVE-2016-10685
pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on...
SSH / SSL RSA Private Key Passphrase Dictionary Enumerator Exploit
This is a script to perform SSH/SSL RSA private key passphrase enumeration with a dictionary attack. !/usr/bin/perl SSH/SSL RSA Private Key Passphrase dictionary enumerator Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg email protected$ ssh-keygen -...
pk-produkter.se XSS vulnerability
Open Bug Bounty ID: OBB-565582 Description| Value ---|--- Affected Website:| pk-produkter.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
pk-sales.de XSS vulnerability
Open Bug Bounty ID: OBB-501076 Description| Value ---|--- Affected Website:| pk-sales.de Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...
pk-help.com XSS vulnerability
Open Bug Bounty ID: OBB-339729 Description| Value ---|--- Affected Website:| pk-help.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
webone cms news_con.php parameters of the pk-SQL injection vulnerability
No description provided by source...
Security update for mbedtls (important)
This update to mbedtls 1.3.19 fixes security issues and bugs. The following vulnerability was fixed: CVE-2017-2784: A remote user could have used a specially crafted certificate to cause mbedtls to free a buffer allocated on the stack when verifying the validity of public key with a secp224k1...
Downloads Resources over HTTP
Overview Affected versions of pk-app-wonderbox insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...
Vulnerabilities of the Debian GNU/Linux operating system, which allow a remote attacker to compromise the confidentiality and integrity of protected information
The multiple vulnerabilities in the cups-pk-helper package of the Debian GNU/Linux operating system may lead to breaches of confidentiality and integrity of protected information. These vulnerabilities can be exploited remotely...
Dragon Blade - Realtime PK War - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Dragon Blade - Realtime PK War published at the 'play' market has multiple vulnerabilities...
pk.gigajob.com XSS vulnerability
Vulnerable URL: http://pk.gigajob.com/%22%3E%3Csvg---onload%3Dalert%28!XSSPOSED!%29%3E-jobs-in-the-region-%22%3E%3Csvg---onload%3Dalert%28!XSSPOSED!%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:09 GMT Vulnerability type:| XSS...
GnuTLS 2.6.x libgnutls lib/pk-libgcrypt.c Malformed DSA Key Handling Remote DoS
No description provided by source. source: http://www.securityfocus.com/bid/34783/info GnuTLS is prone to multiple remote vulnerabilities: - A remote code-execution vulnerability - A denial-of-service vulnerability - A signature-generation vulnerability - A signature-verification vulnerability An...
PK-CMS SQL Injection
Exploit Title : PK-CMS Sql injection vulnerability + Software link : www.passoft-webdev.nl + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"Powered by PK-CMS" + Date: 2013/09/01...
Mandriva Linux Security Advisory : cups-pk-helper (MDVSA-2013:069)
Updated cups-pk-helper package fixes security vulnerability : cups-pk-helper, a PolicyKit helper to configure CUPS with fine-grained privileges, wraps CUPS function calls in an insecure way. This could lead to uploading sensitive data to a CUPS resource, or overwriting specific files with the...
Fedora Update for cups-pk-helper FEDORA-2012-18927
Check for the Version of cups-pk-helper OpenVAS Vulnerability Test Fedora Update for cups-pk-helper FEDORA-2012-18927 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
Fedora Update for cups-pk-helper FEDORA-2012-18927
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 16 : cups-pk-helper-0.1.3-4.fc16 (2012-18927)
This update fixes CVE-2012-4510. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
