2001 matches found
CVE-2016-3614: Undefined Security Weakness
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption...
CVE-2016-3452: Undefined Security Weakness
Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption...
CVE-2016-5442
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Security: Encryption...
GoCD: Directory Listening
Hello Team, Found Directory Listening : http://IP:8153/go/NOTICE/ F105317 There is not usually any good reason to provide directory listings, and disabling them may place additional hurdles in the path of an attacker. This can normally be achieved in two ways: Configure your web server to prevent...
CVE-2016-5008
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server...
The vulnerability of the Zyxel ZLD operating system allows a remote attacker to execute arbitrary code on the web server.
Exploiting a vulnerability in the operating system of the Zyxel ZyWALL USG 300 network firewall/switch allows a malicious actor to inject any desired web script through the Referer header. This is done by improperly handling the “404” error page, thereby compromising the integrity of data process...
DLA-536-1 wget - security update
Bulletin has no description...
phpATM 1.32 (Windows) - Arbitrary File Upload / Remote Command Execution
?php / Exploit Title : "phpATM = 1.32 Remote Command Execution Shell Upload on Windows Servers" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP PoF "phpATM is the acronym for PHP Advanced Transfer...
Office Anywhere 网络智能办公系统某版本前台获取数据库（无需登录）
简要描述： Office Anywhere 网络智能办公系统某版本前台获取数据库（无需登录） 详细说明： Office Anywhere 2011 网络智能办公系统 存在一个通用路径泄漏问题，而泄漏的登录地址可以不需要权限登录到phpmyadmin 且权限为root /mysql/main.php 解密出来可直接登录,这里就不登录进去了 漏洞证明： 附部分案例： http://218.24.163.216:8080/ http://220.171.81.126:1234/ http://221.2.43.9:8000/ http://221.204.213.24/...
HackerOne: RCE in profile picture upload
Issue ===== The profile picture upload at /settings/profile/edit is vulnerable to remote code execution due to the uploaded file being passed to ImageMagick without checking whether it's an actual image. Combined with the fact that ImageMagick parses ASCII text as so called MVG Magic Vector...
Oracle MySQL Server:Security: Encryption Subcomponent Denial of Service Vulnerability
Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in the Server;Security: Encryption subcomponent of Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier, which can be exploited by an attacker to cause a denial of service and impac...
Apache Tomcat Web Manager Scanning Attempt
Remote attackers can send HTTP requests as a method of scanning for Apache Tomcat servers, in order to later exploit vulnerabilities in these servers to compromise the server's security...
Testing TLS/SSL encryption: testssl.sh
testssl.sh is a free command line tool which checks a server’s service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. It’s designed to provide clear output in any case. Testing TLS/SSL encryption: testssl.sh Key features Clear output: you can tell...
FreeBSD : phpmyadmin -- Multiple full path disclosure vulnerabilities (740badcb-c60b-11e5-bf36-6805ca0b3d42)
The phpMyAdmin development team reports : By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. We consider these vulnerabilities to...
WebLogic Apache Commons Java Collections Library Remote Code Execution (CVE-2015-4852)
A remote code execution vulnerability has been reported in the Apache Commons Java Collections Framework. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted serialized object to an application which uses the Apache Commons Java Collections Framework as part of i...
The vulnerability of the MySQL database management system allows a hacker to modify data.
The vulnerability of the Server sub-component in the Security section relates to errors in the code of the MySQL database management system. Exploiting this vulnerability allows a malicious actor to remotely modify data...
The vulnerability of the MySQL database management system allows a hacker to cause a service failure.
The vulnerability of the Server sub-component in the Security section of the MySQL database management system is related to code errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Piwik Analytics Detection
The script sends a HTTP request to the server and attempts to identify Piwik and its version from the reply. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2015-7244
The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authentication for X11 connections, which allows remote attackers to execute arbitrary commands or obtain sensitive information via X11 packets...
