CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4098 matches found

Exploit DB•added 2016/09/07 12:00 a.m.•42 views

CumulusClips 2.4.1 - Multiple Vulnerabilities

Exploit Title: CumulusClips Session fixation Google Dork: inurl:/cumulusclips/videos/ Date: 2.09.2016 Exploit Author: kor3k / Łukasz Korczyk Vendor Homepage: http://cumulusclips.org/ Software Link: http://cumulusclips.org/cumulusclips.zip Version: 2.4.1 Tested on: Debian Jessie Description:...

5.3AI score

SaveExploits0

Prion•added 2016/08/10 2:59 p.m.•32 views

Session fixation

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

5CVSS7AI score0.15893EPSS

SaveExploits0References19Affected Software3

Hacker One•added 2016/07/27 5:14 p.m.•34 views

Harvest: Opportunity to set arbitrary cookies

The location hash on a configure page is used to set a cookie value of the same content. Visiting of a page like https://%domain%.harvestapp.com/invoices/configurefoo will result into a foo cookie setting. This value isn't validated at all, which gives an attacker the opportunity to set arbitrary...

0.5AI score

SaveExploits0

Hacker One•added 2016/07/27 10:29 a.m.•41 views

ownCloud: [api.owncloud.org] CRLF Injection

PoC: https://api.owncloud.org/%23%0dSet-Cookie:crlf=injection2;domain=.owncloud.org; HTTP Response: HTTP/1.1 301 Moved Permanently\r\n Date: Wed, 27 Jul 2016 10:28:01 GMT\r\n Server: Apache\r\n Strict-Transport-Security: max-age=63072000\r\n X-Xss-Protection: 1; mode=block\r\n Location:...

1.7AI score

SaveExploits0

Hacker One•added 2016/07/11 4:40 p.m.•29 views

OLX: stored XSS in olx.pl - ogloszenie TITLE element - moderator acc can be hacked

Hello, The OLX.PL is vulnerable to stored XSS attack. When adding new advertisement, it is possible to put a payload in its title here I used Titlealert1 I see ads are being pre-moderated, however it can remain uncaught also the length limit in title field is enough to insert into it e.g. a BeEF...

1.6AI score

SaveExploits0

Prion•added 2016/07/08 1:59 a.m.•17 views

Session fixation

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

7.2CVSS6.6AI score0.00327EPSS

SaveExploits0References1Affected Software1

OpenVAS•added 2016/07/04 12:00 a.m.•29 views

Symphony CMS Session Fixation Vulnerability

Symphony CMS is prone to a session fixation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.6CVSS7.5AI score0.09421EPSS

SaveExploits5References1

CNVD•added 2016/07/03 12:00 a.m.•27 views

Symphony CMS Session Fixation Vulnerability

Symphony CMS is a content management system developed in PHP and MySQL. A session fixation vulnerability exists in Symphony CMS when session.useonlycookies is enabled in the program, which can be exploited by a remote attacker to hijack a web session by submitting the PHPSESSID parameter...

7.6CVSS7AI score0.09421EPSS

SaveExploits5References1