Lucene search
+L

315 matches found

Mend
Mend
•added 2020/08/29 7:35 p.m.•2 views

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

6.9CVSS0.00941EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/08/29 12:00 a.m.•3 views

PT-2020-15860

Name of the Vulnerable Software and Affected Versions PreMiD versions through 2.1.3 Description The issue concerns a locally hosted socketio web server in PreMiD, which is open to all origins on port 3020. This allows attackers to obtain sensitive Discord user information. Recommendations For...

5.3CVSS0.00941EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/29 12:00 a.m.•4 views

CVE-2020-24928: Missing Authorization

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

5.3CVSS5.7AI score0.00941EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/05/31 12:00 a.m.•10 views

roslib-socketio code execution vulnerability

roslib-socketio is a ROS Robot Operating System JavaScript support library. A security vulnerability exists in roslib-socketio, which originates when a program downloads an executable file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerability by intercepting the...

9.3CVSS7.1AI score0.01725EPSS
SaveExploits0References1
Veracode
Veracode
•added 2018/05/30 2:41 a.m.•25 views

Man-in-the-Middle (MitM)

roslib-socketio are vulnerable to man-in-the-middle MitM attacks. This is because the application downloads binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the...

8.1CVSS8.3AI score0.01725EPSS
SaveExploits0References1Affected Software2
NVD
NVD
•added 2018/05/29 8:29 p.m.•25 views

CVE-2016-10681

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...

9.3CVSS8.4AI score0.01725EPSS
SaveExploits0References1
OSV
OSV
•added 2018/05/29 8:29 p.m.•22 views

CVE-2016-10681

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...

8.1CVSS8.6AI score
SaveExploits0References1
Prion
Prion
•added 2018/05/29 8:29 p.m.•18 views

Remote code execution

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...

9.3CVSS8.1AI score0.01725EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/05/29 8:00 p.m.•30 views

CVE-2016-10681

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...

8.4AI score0.01725EPSS
SaveExploits0References1
CVE
CVE
•added 2018/05/29 8:00 p.m.•77 views

CVE-2016-10681

The CVE-2016-10681 issue affects roslib-socketio. Affected code downloads binary resources over HTTP, enabling MITM interception and, in a network-positioned scenario, potential remote code execution by substituting the requested binary with a malicious one. Public advisories (GHSA-xq8r-r72r-pqwm...

9.3CVSS8.2AI score0.01725EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2018/05/29 8:00 p.m.•3 views

CVE-2016-10681

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...

9.3CVSS0.01725EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/05/29 12:00 a.m.•2 views

PT-2018-4859

Name of the Vulnerable Software and Affected Versions roslib-socketio versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code...

9.3CVSS0.01725EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/29 12:00 a.m.•2 views

CVE-2016-10681: Missing Encryption of Sensitive Data

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...

9.3CVSS7.9AI score0.01725EPSS
SaveExploits0References3
n0where
n0where
•added 2017/03/03 5:23 a.m.•80 views

Browser-based GDB frontend: gdbGUI

A modern, browser-based frontend to gdb gnu debugger. Add breakpoints, view stack traces, and more in C, C++, Go, and Rust! Simply run gdbgui from the terminal and a new tab will open in your browse Features Debug a different program in each tab new gdb instance is spawned for each tab Set/remove...

7.1AI score
SaveExploits0References4
Veracode
Veracode
•added 2017/02/08 8:08 a.m.•13 views

Denial Of Service (DoS)

netty-socketio is vulnerable to denial of service DoS attacks. It is possible for an attacker to open many silent channels which don't timeout, causing denial of service...

6.4AI score
SaveExploits0
Rows per page
Query Builder