Lucene search
+L

11 matches found

Kitploit
Kitploit
•added 2026/10/11 6:55 p.m.•25 views

exrex

EXREX Métodos irregulares para expresiones regulares. Exrex es una herramienta de línea de comandos y un módulo de Python que genera todas - o aleatorias - las cadenas que coinciden con una expresión regular dada y más. Es Python puro, sin dependencias externas. Hay expresiones regulares con...

6.3AI score
SaveExploits0References4
NVD
NVD
•added 2024/01/03 5:15 p.m.•48 views

CVE-2023-46740

CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string...

9.8CVSS6.9AI score0.00439EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/01/03 4:20 p.m.•6 views

CVE-2023-46740 Insecure random string generator used for sensitive data

CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string...

6.5CVSS7.7AI score0.00439EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/01/03 4:20 p.m.•55 views

CVE-2023-46740 Insecure random string generator used for sensitive data

CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string...

6.5CVSS9.4AI score0.00439EPSS
SaveExploits0References2
Mend
Mend
•added 2024/01/03 4:20 p.m.•11 views

CVE-2023-46740

CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string...

9.8CVSS0.00439EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/01/03 4:14 p.m.•52 views

Insecure random string generator used for sensitive data

CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string and impersonate a user thereby obtaining higher privileges. When CubeFS creates ne...

9.8CVSS6.6AI score0.00439EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2024/01/03 4:14 p.m.•112 views

GHSA-4248-P65P-HCRM Insecure random string generator used for sensitive data

CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string and impersonate a user thereby obtaining higher privileges. When CubeFS creates ne...

8.2CVSS9.2AI score0.00439EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2019/01/09 7:29 p.m.•9 views

CVE-2017-15428

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.6AI score0.18118EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2019/01/09 7:29 p.m.•12 views

UBUNTU-CVE-2017-15428

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.7AI score0.18118EPSS
SaveExploits0References4
FreeBSD
FreeBSD
•added 2018/04/03 12:00 a.m.•15 views

wordpress -- multiple issues

wordpress developers reports: Don't treat localhost as same host by default. Use safe redirects when redirecting the login page if SSL is forced. Make sure the version string is correctly escaped for use in generator tags...

0.7AI score
SaveExploits0References1
Metasploit
Metasploit
•added 2017/10/29 12:00 a.m.•86 views

Xplico Remote Code Execution

This module exploits command injection vulnerability. Unauthenticated users can register a new account and then execute a terminal command under the context of the root user. The specific flaw exists within the Xplico, which listens on TCP port 9876 by default. The goal of Xplico is extract from ...

9CVSS8AI score0.80759EPSS
SaveExploits7
Rows per page
Query Builder