com.cibuddy:karaf.assembly (=1.0.0), com.kagurabi.services:kagura-assembly (>=1.5 <=1.9) +28 more potentially affected by CVE-2016-8750 via org.apache.karaf:apache-karaf (>=2.0.0 <=4.0.7)

org.apache.karaf:apache-karaf MAVEN version =2.0.0, =1.5, =1.5.6, =4.4.1, =1.1.2, =1.0.0, =2.0.0, =2.0.6, =1.0, =2.18.0, =2.7.7, =3.0.0, =1.6.1-incubating, =1.6.1-incubating, =2.0.3 and more Source cves: CVE-2016-8750 Source advisory: OSV:GHSA-CHJ8-5XGW-WCVJ...

CVE-2012-0161

creationtimestamp| type| source ---|---|--- 2018-10-17 16:24:55+00:00| seen| MISP/57863db2-b544-4758-b291-7a5c95ca48b7...

CVE-2018-17915

creationtimestamp| type| source ---|---|--- 2018-10-10 14:36:01+00:00| seen| MISP/5bbe0c82-a788-4af0-8ecd-34e60a021402 2018-10-10 14:41:59+00:00| seen| MISP/5bbe0eab-3364-42f4-a6a8-34da0a021402...

ShopsN open source online store full system RechargeController page there are code execution vulnerabilities

ShopsN free version of the B2C e-commerce is a Shanghai Yisu Network Technology Co., Ltd. in line with the enterprise-level commercial standards full-featured really allow free commercial use of open source online store full network system. ShopsN v2.3.5 official version of the RechargeController...

CVE-2017-5869

creationtimestamp| type| source ---|---|--- 2017-05-27 15:33:15+00:00| seen| https://t.me/webamoozir/1866 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:58+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

Faraday 1.0.15 - Collaborative Penetration Test and Vulnerability Management Platform

A brand new version is ready for you to enjoy! Faraday v1.0.15 Community, Pro & Corp was published today with new exciting features. As a part of our constant commitment to the IT sec community we added a tool that runs several other tools to all IPs in a given list. This results in a major scan ...

IIS the latest high-risk Vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. THE POC and online detection of source-vulnerability warning-the black bar safety net

! HTTP. sys remote code execution vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. the A remote code execution vulnerability exists in the HTTP Protocol stack HTTP.sys, when the HTTP.sys not correct parsing specially crafted HTTP request to cause this vulnerability. Successful exploitation of...

Third-Party Software Library Risks Scrutinized at Black Hat

Enterprise application developers are under real pressures to push projects out the door quickly and cheaply, and each new version certainly has to be better than the last. This forces them to make decisions that, at a minimum, improve efficiency—and also introduce additional risks. Of particular...

Chrome for Android Update Patches URL Spoofing Bug

The latest update to Chrome on Android – pushed yesterday – fixes two bugs, including a critical flaw in the browser that could have let an attacker trick a user into visiting a malicious site. The problem, marked high priority by Google, was discovered by Japanese app developer Keita Haga. The...

CVE-2014-3864

Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that lacks a --- header line...

The White House and Zero Day Sleight of Hand

The White House wants you to know that it did not know about the OpenSSL Heartbleed vulnerability before you did. The White House also wants you to know that administration officials don’t think stockpiling zero days isn’t necessarily good for national security. That’s all well and good, except...

CVE-2010-0248

creationtimestamp| type| source ---|---|--- 2012-03-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18642 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10002ieobject.rb 2025-02-06 03:13:39+00:00|...

CVE-2006-6184

creationtimestamp| type| source ---|---|--- 2011-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16350 2013-04-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24952 2018-05-29 15:50:33+00:00| seen|...

USN-909-1: dpkg vulnerability

William Grant discovered that dpkg-source did not safely apply diffs when unpacking source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of...

DEBIAN-CVE-2009-1377

The dtls1bufferrecord function in ssl/d1pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service memory consumption via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."...

view-source: protocol

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to 1 bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; 2 read, create, or modify...

CVE-2008-5457

creationtimestamp| type| source ---|---|--- 2009-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8336 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16762 2018-05-29 15:50:33+00:00| seen|...

Sun xVM VirtualBox 1.6.4 - Privilege Escalation (PoC)

Sun xVM VirtualBox 1.6.4 - Privilege Escalation PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Sun xVM VirtualBox Privilege Escalation Vulnerability Advisory Information Title: Sun xVM VirtualBox Privilege...

CVE-2007-1201

Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."...

CVE-2007-6702

CVE-2007-6702 affects the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device. The vulnerability exposes a password embedded in the typepassword field, which can be read from the HTML source by remote attackers, enabling password disclosure. The CVSS2 base score is 5.0 (MEDIUM) with netw...