Lucene search
K

1430 matches found

Kitploit
Kitploit
added 2019/06/16 1:0 p.m.242 views

Terminus - A Terminal For A More Modern Age

Terminus is a highly configurable terminal emulator for Windows, macOS and Linux Theming and color schemes Fully configurable shortcuts Split panes Remembers your tabs PowerShell and PS Core, WSL, Git-Bash, Cygwin, Cmder and CMD support Integrated SSH client and connection manager Full Unicode...

7.3AI score
Exploits0References13
RedHat Linux
RedHat Linux
added 2019/05/14 8:48 p.m.1 views

hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)

Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA STore Address and STD STore Data sub-operations. These sub-operations allow the processor to hand-off address generation...

5.6CVSS6.9AI score0.00515EPSS
Exploits0References6
exploitpack
exploitpack
added 2019/05/02 12:0 a.m.15 views

ROPSplit

This is the solution for the ROPEmporium Split challenge Split Solution by jSacco Description: :P from struct import pack gef- got GOT protection: Partial RelRO | GOT functions: 7 ... 0x804a018 [email protected] → 0x8048436 ... gef strings ... 0x804a030: /bin/cat flag.txt ... gdb-peda$ ropgadget re...

0.6AI score
Exploits0
Positive Technologies
Positive Technologies
added 2019/03/06 12:0 a.m.3 views

PT-2019-4598 · Python +8 · Python +8

Name of the Vulnerable Software and Affected Versions: Python versions 2.7.x through 2.7.16 and 3.x through 3.7.2 Description: The issue is related to improper handling of Unicode encoding during NFKC normalization, which can lead to information disclosure, including credentials and cookies cache...

10CVSS6.5AI score0.90232EPSS
Exploits122References994
Veracode
Veracode
added 2019/01/15 9:2 a.m.22 views

Denial Of Service (DoS)

wireshark is vulnerable to denial of service DoS attacks. The vulnerability exists as an use-after-free issue in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership...

5CVSS5.7AI score0.00469EPSS
Exploits0References15Affected Software1
CNVD
CNVD
added 2018/12/14 12:0 a.m.0 views

IBM BigFix Platform HTTP Response Splitting Vulnerability

IBM BigFix Platform is a dynamic set of IBM's integrated messaging content-driven and management system multi-technology platform. A security vulnerability exists in IBM BigFix Platform that originates when the program incorrectly validates user-submitted input. A remote attacker could exploit th...

6.1CVSS6.9AI score0.00187EPSS
Exploits0References1
Prion
Prion
added 2018/12/12 4:29 p.m.17 views

Cross site scripting

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split respons...

4.3CVSS4.9AI score0.00187EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2018/12/12 4:29 p.m.14 views

CVE-2018-1474

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split respons...

6.1CVSS6.4AI score0.00187EPSS
Exploits0References2
CNVD
CNVD
added 2018/12/11 12:0 a.m.2 views

Google Android Buffer Overflow Vulnerability (CNVD-2019-27582)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparsesplitdrccharacteristic' function of the impddrcstaticpayload.c file in Android version 9, which stems from a lack of bounda...

9.3CVSS9.6AI score0.00177EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2018/11/05 12:0 a.m.32 views

lighttpd 1.4.31 http_request_split_value Function Header Handling DoS

According to its banner, the version of lighttpd running on the remote host is 1.4.31. It is, therefore, affected by a denial of service vulnerability. An error in the httprequestsplitvalue function in 'src/request.c' can cause the application to enter an endless loop when handling specially...

5CVSS7.2AI score0.37913EPSS
Exploits7References5
RedHat Linux
RedHat Linux
added 2018/10/31 8:43 a.m.591 views

Important: Red Hat Security Advisory: glusterfs security and bug fix update

Updated glusterfs packages that fix multiple security issues and bugs are now available for Red Hat Gluster Storage 3.4 on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...

8.8CVSS6.7AI score0.02567EPSS
Exploits0References28
RedHat Linux
RedHat Linux
added 2018/10/31 8:43 a.m.502 views

Important: Red Hat Security Advisory: glusterfs security and bug fix update

Updated glusterfs packages that fix multiple security issues and bugs are now available for Red Hat Gluster Storage 3.4 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...

8.8CVSS6.7AI score0.02567EPSS
Exploits0References10
Microsoft KB
Microsoft KB
added 2018/09/27 12:0 a.m.2 views

May 25, 2017—KB4020102 (OS Build 15063.332)

May 25, 2017—KB4020102 OS Build 15063.332 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where NTLM fails to generate a challenge response when CredGuard is enabled, NTLMv...

6.9AI score
Exploits0
Citrix
Citrix
added 2018/08/20 12:0 a.m.6 views

How to Modify or Reallocate Citrix licenses

Reasons for Modify allocation: Allocated licenses to the incorrect host name, host id or MAC address Consolidate multiple license files into one license file Split one license file into multiple license files A problem occurred when adding the license file to the license server...

7.2AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2018/08/03 4:23 a.m.25 views

Security Bulletin: An HTTP Response splitting vulnerability in TXSeries for Multiplatfoms (CVE-2015-2017)

Summary Security Bulletin: An HTTP Response splitting vulnerability in TXSeries for Multiplatfoms CVE-2015-2017 Vulnerability Details CVEID: CVE-2015-2017 DESCRIPTION: The IBM WebSphere Portal is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability usi...

4.3CVSS0.3AI score0.0035EPSS
Exploits0Affected Software1
CVE
CVE
added 2018/07/10 4:0 p.m.46 views

CVE-2018-1549

CVE-2018-1549 affects IBM Rational Quality Manager: vulnerable in RQM 5.0–5.0.2 and 6.0–6.0.5 due to HTTP response splitting. A remote attacker could craft a URL to trigger a split response, enabling web cache poisoning, cross-site scripting, and potential sensitive data exposure. Remediation per...

5.4CVSS5.3AI score0.00109EPSS
Exploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/17 3:29 p.m.18 views

Security Bulletin: HTTP Response Splitting in Liberty affects IBM MessageSight (CVE-2016-0359)

Summary There is a potential HTTP response splitting vulnerability in IBM WebSphere Application Server Liberty. IBM WebSphere Application Server Liberty is used by IBM MessageSight. IBM MessageSight has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2016-0359 DESCRIPTION: IBM...

6.1CVSS0.5AI score0.00312EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 10:3 p.m.22 views

Security Bulletin: HTTP Response Splitting vulnerability affects IBM Security Guardium (CVE-2017-1262 )

Summary A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks. IBM Security Guardium has provided a fix for this vulnerability. Vulnerability...

6.1CVSS0.6AI score0.0032EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 10:43 p.m.22 views

Security Bulletin: Vulnerability in HTTP Response Splitting affects IBM Algo One - Algo Risk Application and IBM Algo One - Core (CVE-2015-2017)

Summary The IBM WebSphere Portal is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such...

4.3CVSS0.2AI score0.0035EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 10:42 p.m.26 views

Security Bulletin: IBM Cognos Controller is affected by HTTP response splitting attack in WebSphere Application Server (CVE-2015-2017)

Summary There is a vulnerability in IBM WebSphere Application Server that could allow an HTTP response splitting attack in Channel. Vulnerability Details CVEID: CVE-2015-2017 DESCRIPTION: IBM WebSphere Application Server is vulnerable to HTTP response splitting attacks. A remote attacker could...

4.3CVSS0.5AI score0.0035EPSS
Exploits0Affected Software1
Rows per page
Query Builder