4685 matches found
Buffer overflow
Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications subcomponent: Mobile Communications Platform. Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker with network access...
CVE-2017-3537
Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications subcomponent: Mobile Communications Platform. Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker with network access...
CVE-2017-3537
CVE-2017-3537 affects the Oracle Real-Time Scheduler component of Oracle Utilities Applications (Mobile Communications Platform) with affected versions 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. AFFECTED FUNCTION/FILE: Oracle Real-Time Scheduler (Mobile Communications Platform subcomponent). Root cause: vu...
CVE-2017-3537
Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications subcomponent: Mobile Communications Platform. Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker with network access...
CVE-2017-3537: Undefined Security Weakness
Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications subcomponent: Mobile Communications Platform. Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker with network access...
PT-2017-15971
Name of the Vulnerable Software and Affected Versions Oracle Utilities Applications subcomponent: Mobile Communications Platform versions 2.2.0.3.13, 2.3.0.0, and 2.3.0.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Real-Time...
CVE-2016-1213
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites...
CVE-2016-1213
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites...
Code injection
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites...
CVE-2016-1213
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites...
CVE-2016-1213
CVE-2016-1213 affects Cybozu Garoon up to version 4.2.1 (before 4.2.2). The vulnerability is an open redirect in the Scheduler function that lets an attacker cause a user to be redirected to an arbitrary website, enabling phishing risks. Public sources in the connected documents consistently desc...
CVE-2016-1213: URL Redirection to Untrusted Site
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites...
PT-2017-7938
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description The issue concerns the "Scheduler" function, which allows remote attackers to redirect users to arbitrary websites. Recommendations For versions prior to 4.2.2, update to version 4.2.2 or later...
Microsoft Windows taskschd.msc Privilege Escalation Vulnerability
Microsoft Windows taskschd.msc local SYSTEM privilege escalation exploit. Microsoft Windows 'taskschd.msc' Local SYSTEM Privilege Escalation Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY...
Microsoft Windows taskschd.msc Privilege Escalation
Microsoft Windows 'taskschd.msc' Local SYSTEM Privilege Escalation Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especiall...
Scheduler Workbench Integration - Critical - Unsupported - SA-CONTRIB-2017-39
Updates 20170414 - A new module maintainer has been found and a new release for this module has been published. Provides integration between the Scheduler module and the Workbench Moderation module. The security team is marking this module unsupported. There is a known security issue with the...
Dr0p1t-Framework 1.2 - A Framework That Creates An Advanced FUD Dropper With Some Tricks
Have you ever heard about trojan droppers ? In short dropper is type of trojans that downloads other malwares and Dr0p1t gives you the chance to create a dropper that bypass most AVs and have some tricks ; Features Framework works with Windows and Linux Download executable on target system and...
CVE-2017-6803
Multiple cross-site request forgery CSRF vulnerabilities in the web interface in the Scheduler in SolarWinds formerly Serv-U FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that 1 change the admin password, 2 terminate the scheduler, or 3 possibly...
CVE-2017-6803
Multiple cross-site request forgery CSRF vulnerabilities in the web interface in the Scheduler in SolarWinds formerly Serv-U FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that 1 change the admin password, 2 terminate the scheduler, or 3 possibly...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the web interface in the Scheduler in SolarWinds formerly Serv-U FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that 1 change the admin password, 2 terminate the scheduler, or 3 possibly...