Lucene search
+L

3800 matches found

BDU FSTEC
BDU FSTEC
•added 2015/10/01 12:00 a.m.•17 views

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...

4.3CVSS5.6AI score0.01915EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2015/10/01 12:00 a.m.•18 views

The vulnerability of the iOS operating system allows a hacker to replace the dialog boxes of arbitrary applications.

The vulnerability of the SpringBoard component in the iOS operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to replace the dialog windows of arbitrary applications with a specially crafted application...

4.3CVSS5.6AI score0.01262EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2015/10/01 12:00 a.m.•17 views

The vulnerability of the iOS operating system, which allows a hacker to replace the content of web pages

The vulnerability of the Safari browser on the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the content of web pages using a specially crafted website...

4.3CVSS5.5AI score0.01425EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2015/10/01 12:00 a.m.•17 views

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...

4.3CVSS5.6AI score0.01915EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2015/10/01 12:00 a.m.•20 views

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...

4.3CVSS5.6AI score0.0252EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2015/09/22 12:00 a.m.•39 views

Firefox ESR < 38.3 Multiple Vulnerabilities

The version of Firefox ESR installed on the remote Windows host is prior to 38.3. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues to...

7.5CVSS7.9AI score0.0608EPSS
SaveExploits0References27
BDU FSTEC
BDU FSTEC
•added 2015/09/15 12:00 a.m.•23 views

The vulnerability of Safari browser and iOS operating system allows attackers to replace elements of the user interface.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace elements of the user interface remotely...

4.3CVSS7.3AI score0.02232EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2015/09/08 12:00 a.m.•20 views

The vulnerability of the iOS operating system allows a perpetrator to replace arbitrary extensions.

The vulnerability of the MobileInstallation component in the iOS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to replace arbitrary extensions using a specially crafted application...

5.8CVSS5.6AI score0.01477EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2015/09/02 12:00 a.m.•20 views

Solaris 10 (sparc) : 151597-05 (deprecated)

Oracle Snap Management Utility for Oracle Database 1.2.0: S10 patc. Date this patch was last updated by Sun : Sep/01/15 This plugin has been deprecated and either replaced with individual 151597 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security...

6.9AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/08/16 12:00 a.m.•7 views

CVE-2015-5770: Undefined Security Weakness

MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app...

5.8CVSS5.9AI score0.01477EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2015/07/23 7:58 p.m.•31 views

ok.ru: Покупка песни дешевле, чем она стоит.

Итак, часть песен в приложении можно купить. Нажимая на кнопку купить, происходит запрос к серверу обрезано, для удобства: GET /isDownloaded;jsessionid=DZSUq1yTUMNFNcYk5-mZ10DGJbUCoNYFHRUcNNwINHoSrDkkkf4gInosiPimoqGaysNvWs7GV7fnOMGgfsbCA.hHaqWq9PyS8b9PmEoYfcA?tid=90920917758231 В ответ получаем:...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2015/07/04 2:00 a.m.•12 views

Here's How You Can Replace Your iPhone Battery For Free

Nothing is scarier than your iPhone alerting you that your battery had hit 5%, especially when you just took it off the charger with a 100 percent full battery about an hour ago. To be very honest, it literally sucks. However, you no need to worry about this problem now, as there's a solution...

6.7AI score
SaveExploits0
OSV
OSV
•added 2015/06/16 5:13 p.m.•17 views

USN-2649-1 devscripts vulnerability

It was discovered that the uupdate tool incorrectly handled symlinks. If a user or automated system were tricked into processing specially crafted files, a remote attacker could possibly replace arbitrary files, leading to a privilege escalation...

5CVSS5.9AI score0.0373EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2015/06/05 12:00 a.m.•15 views

The vulnerability of Google Chrome browser allows a perpetrator to replace data.

The android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java file of the Google Chrome browser contains errors related to improper restriction of URL identifiers when creating pop-up windows. As a result, attackers may be able to replace the data displayed in the pop-up windows...

5CVSS7.7AI score0.01412EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2015/06/05 12:00 a.m.•16 views

The vulnerability of Google Chrome browser allows a perpetrator to replace data.

The implementation of the spelling checking function in the Google Chrome browser does not require the use of a secure HTTPS connection. As a result, those who control network traffic can replace the elements of the dictionary...

4.3CVSS7.7AI score0.00989EPSS
SaveExploits0References4Affected Software1
securityvulns
securityvulns
•added 2015/06/01 12:00 a.m.•101 views

Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability

Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability -- http://www.info-sec.ca/advisories/Thycotic-SecretServer.html Overview "With the Password Manager Secret Server app, you can access passwords for an EXISTING on-premise Secret Server or Secret Server...

0.2AI score
SaveExploits0
exploitpack
exploitpack
•added 2015/06/01 12:00 a.m.•33 views

Linux Kernel (PonyOS 3.0) - VFS Permissions Local Privilege Escalation

Linux Kernel PonyOS 3.0 - VFS Permissions Local Privilege Escalation / MyLittleUnix include include include include include char pwnystr = "root:07821d2459368443042007bf1c7cdf3c55284" "29a65f8f10ce388d301b47865a283147bfd290545b" "0b9b12ae622a8eb359497cb3635506f99d2f5e4c4e"...

0.8AI score
SaveExploits0
OSV
OSV
•added 2015/05/27 10:59 a.m.•9 views

DEBIAN-CVE-2014-9710

The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, which allows local users to bypass intended ACL settings and gain privileges via standard filesystem operations 1 during an xattr-replacement time...

6.9CVSS7.7AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
•added 2015/05/27 10:00 a.m.•139 views

CVE-2014-9710

CVE-2014-9710 affects the Linux kernel’s Btrfs xattr handling prior to 3.19. The vulnerability arises because the visible xattr state may not be consistent with a requested replacement, enabling local attackers to bypass ACLs and gain privileges through standard filesystem operations during an xa...

6.9CVSS7.1AI score0.00277EPSS
SaveExploits0References7Affected Software1
Patchstack
Patchstack
•added 2015/05/15 12:00 a.m.•17 views

WordPress Dynamic Font Replacement Plugin <= 1.3 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

6AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder