Lucene search
+L

7158 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/01/10 12:0 a.m.490 views

Trend Micro Control Manager DLPIncidentJobWidget SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6CVSS9.1AI score0.19868EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/01/10 12:0 a.m.491 views

Trend Micro Control Manager PolicyResult SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the PolicyResu...

6CVSS9.1AI score0.48765EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/01/10 12:0 a.m.491 views

Trend Micro Control Manager ViolationCntByTemplate SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6CVSS9.1AI score0.19868EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/01/10 12:0 a.m.22 views

Trend Micro Control Manager ViolationCnt SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ViolationC...

6CVSS9.1AI score0.19868EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/01/10 12:0 a.m.178 views

Trend Micro Control Manager TemplateMatchByTemplate SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6CVSS9.1AI score0.48765EPSS
SaveExploits0References1
n0where
n0where
added 2018/01/09 5:6 a.m.169 views

Web Reconnaissance Framework: Recon-ng

Recon-ng is a full-featured Web Reconnaissance framework written in Python. Complete with independent modules, database interaction, built in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can...

7.7AI score
SaveExploits0References6
Openbugbounty
Openbugbounty
added 2018/01/06 5:1 a.m.16 views

ameli.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-489611 Description| Value ---|--- Affected Website:| ameli.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/01/04 12:0 a.m.38 views

Ubuntu 14.04 LTS / 16.04 LTS : Firefox regression (USN-3477-4)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3477-4 advisory. USN-3477-1 fixed vulnerabilities in Firefox. The update introduced a crash reporting issue where background tab crash reports were sent to Mozilla...

8.5AI score
SaveExploits0References1
OSV
OSV
added 2018/01/03 12:53 p.m.5 views

USN-3477-4 firefox regression

USN-3477-1 fixed vulnerabilities in Firefox. The update introduced a crash reporting issue where background tab crash reports were sent to Mozilla without user opt-in. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were...

5.9AI score
SaveExploits0References2
Ubuntu
Ubuntu
added 2018/01/03 12:53 p.m.83 views

USN-3477-4: Firefox regression

USN-3477-1 fixed vulnerabilities in Firefox. The update introduced a crash reporting issue where background tab crash reports were sent to Mozilla without user opt-in. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were...

7.7AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2017/12/31 3:40 p.m.16 views

cabincrew.bri.co.id XSS vulnerability

Open Bug Bounty ID: OBB-472487 Description| Value ---|--- Affected Website:| cabincrew.bri.co.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
seebug.org
seebug.org
added 2017/12/29 12:0 a.m.44 views

Dell SonicWALL Global Management System GMS 8.1 XSS Vulnerabilities

Summary Provide your organization, distributed enterprise or managed service offering with an intuitive, powerful way to rapidly deploy and centrally manage SonicWall solutions, with SonicWall GMS. Get more value from your firewall, secure remote access, anti-spam, and backup and recovery solutio...

6.2AI score
SaveExploits0
seebug.org
seebug.org
added 2017/12/29 12:0 a.m.41 views

Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection

Summary Provide your organization, distributed enterprise or managed service offering with an intuitive, powerful way to rapidly deploy and centrally manage SonicWall solutions, with SonicWall GMS. Get more value from your firewall, secure remote access, anti-spam, and backup and recovery solutio...

8AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/12/22 5:0 p.m.15 views

bricoman.fr XSS vulnerability

Open Bug Bounty ID: OBB-457375 Description| Value ---|--- Affected Website:| bricoman.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/12/21 3:36 a.m.13 views

bibliotecaadjud.ro XSS vulnerability

Open Bug Bounty ID: OBB-456411 Description| Value ---|--- Affected Website:| bibliotecaadjud.ro Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

6.4AI score
SaveExploits0
Veeam
Veeam
added 2017/12/21 12:0 a.m.13 views

Veeam Availability Console Cumulative Patch 1376

Challenge Veeam Availability Console Cumulative Patch 1376 Cause Please confirm you are running version 2.0.1.1319 or later prior to installing this cumulative hotfix 1376. You can check this under Windows Programs and features. After upgrading, your build will be version 2.0.1.1376. As a result ...

6.8AI score
SaveExploits0Affected Software1
Openbugbounty
Openbugbounty
added 2017/12/19 4:25 a.m.10 views

liberty.edu XSS vulnerability

Open Bug Bounty ID: OBB-455315 Description| Value ---|--- Affected Website:| liberty.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/12/17 10:22 p.m.13 views

buildbot.com.br XSS vulnerability

Open Bug Bounty ID: OBB-454742 Description| Value ---|--- Affected Website:| buildbot.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2017/12/14 1:13 p.m.28 views

dirsearch v0.3.8 - Brute Force Directories and Files in Websites

dirsearch is a simple command line tool designed to brute force directories and files in websites. Operating Systems supported Windows XP/7/8/10 GNU/Linux MacOSX Features Multithreaded Keep alive connections Support for multiple extensions -e|--extensions asp,php Reporting plain text, JSON...

7.4AI score
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2017/12/12 8:0 a.m.57 views

December 12, 2017—KB4053579 (OS Build 14393.1944)

None None...

9.8CVSS6.7AI score0.68491EPSS
SaveExploits48
Rows per page
Query Builder