Lucene search
+L

5193 matches found

The Hacker News
The Hacker News
added 2018/12/15 6:5 a.m.221 views

Critical SQLite Flaw Leaves Millions of Apps Vulnerable to Hackers

Cybersecurity researchers have discovered a critical vulnerability in widely used SQLite database software that exposes billions of deployments to hackers. Dubbed as 'Magellan' by Tencent's Blade security team, the newly discovered SQLite flaw could allow remote attackers to execute arbitrary or...

0.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/12/15 6:5 a.m.2 views

Critical SQLite Flaw Leaves Millions of Apps Vulnerable to Hackers

Cybersecurity researchers have discovered a critical vulnerability in widely used SQLite database software that exposes billions of deployments to hackers. Dubbed as 'Magellan ' by Tencent's Blade security team, the newly discovered SQLite flaw could allow remote attackers to execute arbitrary or...

7.5AI score
SaveExploits0
exploitpack
exploitpack
added 2018/12/15 12:0 a.m.122 views

Google Chrome 70 - SQLite Magellan Crash (PoC)

Google Chrome 70 - SQLite Magellan Crash PoC This proof-of-concept crashes the Chrome renderer process using Tencent Blade Team's Magellan SQLite3 bug. It's based on a SQLite test case from the commit that fixed the bug. If you're using Chrome 70 or below, tap the button below to crash this page:...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/12/15 12:0 a.m.69 views

Google Chrome 70 - SQLite Magellan Crash (PoC)

This proof-of-concept crashes the Chrome renderer process using Tencent Blade Team's Magellan SQLite3 bug. It's based on a SQLite test case from the commit that fixed the bug. If you're using Chrome 70 or below, tap the button below to crash this page: Crash this page Your browser's user agent is...

5.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/12/10 12:0 a.m.30 views

openSUSE Security Update : Chromium (openSUSE-2018-1521)

This update to Chromium version 71.0.3578.80 fixes security issues and bugs. Security issues fixed boo1118529 : - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use after free in PDFium -...

8.8CVSS7.5AI score0.34292EPSS
SaveExploits1References28
CNVD
CNVD
added 2018/12/10 12:0 a.m.3 views

SQLite and Chrome SQLite Component Remote Code Execution Vulnerability

SQLite is an open source embedded relational database management system based on C. Google Chromium is a Web browser developed by Google Google. A remote code execution vulnerability exists in the SQLite and Chrome SQLite components. An attacker can exploit the vulnerability to remotely execute...

8.1AI score
SaveExploits0References1
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2018/12/04 12:0 a.m.113 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 71 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 71.0.3578.80 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

8.8CVSS9AI score0.34292EPSS
SaveExploits1Affected Software1
FreeBSD
FreeBSD
added 2018/12/04 12:0 a.m.50 views

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 43 security fixes in this release, including: High CVE-2018-17480: Out of bounds write in V8 High CVE-2018-17481: Use after free in PDFium High CVE-2018-18335: Heap buffer overflow in Skia High CVE-2018-18336: Use after free in PDFium High CVE-2018-18337: Use after...

8.8CVSS1.9AI score0.34292EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/03 10:29 p.m.9 views

CVE-2018-3854

An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially crafted sqlite3 request can cause the removal of the password protection, allowing an attacker to access and modify the data without knowin...

7.1CVSS5.8AI score0.00432EPSS
SaveExploits1References1
FreeBSD
FreeBSD
added 2018/12/01 12:0 a.m.14 views

bro -- "Magellan" remote code execution vulnerability in bundled sqlite

Bro Network security Monitor reports: Bro 2.6.1 updates the embedded SQLite to version 3.26.0 to address the "Magellan" remote code execution vulnerability. The stock Bro configuration/scripts don't use SQLite by default, but custom user scripts/packages may...

4.5AI score
SaveExploits0References1
n0where
n0where
added 2018/11/21 12:16 a.m.96 views

Extract Digital Evidences From Images: Imago-Forensics

Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago allows to extract...

0.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2018/11/18 1:32 p.m.96 views

SSH Auditor - The Best Way To Scan For Weak Ssh Passwords On Your Network

The Best Way To Scan For Weak Ssh Passwords On Your Network Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known ho...

7.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2018/11/17 1:13 p.m.79 views

Pacu - The AWS Exploitation Framework, Designed For Testing The Security Of Amazon Web Services Environments

Pacu is an open source AWS exploitation framework, designed for offensive security testing against cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account, using modules to easily expand its...

7.5AI score
SaveExploits0References7
zdt
zdt
added 2018/11/14 12:0 a.m.272 views

Maitra Mail Tracking System 1.7.2 - SQL Injection / Database File Download Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Maitra - Mail Tracking System 1.7.2 - SQL Injection / Database File Download Exploit Author: Ihsan Sencan Vendor Homepage: http://salzertechnologies.com/ Software Link:...

0.1AI score
SaveExploits0
exploitpack
exploitpack
added 2018/11/13 12:0 a.m.44 views

Maitra Mail Tracking System 1.7.2 - SQL Injection Database File Download

Maitra Mail Tracking System 1.7.2 - SQL Injection Database File Download Exploit Title: Maitra - Mail Tracking System 1.7.2 - SQL Injection / Database File Download Dork: N/A Date: 2018-11-11 Exploit Author: Ihsan Sencan Vendor Homepage: http://salzertechnologies.com/ Software Link:...

0.4AI score
SaveExploits0
n0where
n0where
added 2018/11/12 5:20 a.m.89 views

Automatic SQL injection and database takeover tool: sqlmap

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

SaveExploits0References2
Fedora
Fedora
added 2018/11/09 6:4 a.m.15 views

[SECURITY] Fedora 29 Update: roundcubemail-1.3.8-1.fc29

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

0.2AI score
SaveExploits0
Fedora
Fedora
added 2018/11/04 10:9 p.m.15 views

[SECURITY] Fedora 28 Update: roundcubemail-1.3.8-1.fc28

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

0.2AI score
SaveExploits0
Fedora
Fedora
added 2018/11/04 2:14 a.m.24 views

[SECURITY] Fedora 27 Update: roundcubemail-1.3.8-1.fc27

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

0.2AI score
SaveExploits0
Prion
Prion
added 2018/11/01 5:29 p.m.16 views

Authentication flaw

The time-based one-time-password TOTP function in the application logic of the Green Electronics RainMachine Mini-8 2nd generation uses the administrator's password hash to generate a 6-digit temporary passcode that can be used for remote and local access, aka a "Use of Password Hash Instead of...

6.8CVSS8AI score0.01131EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder