Lucene search
+L

6470 matches found

BDU FSTEC
BDU FSTEC
•added 2024/11/07 12:00 a.m.•13 views

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

6.4CVSS5.2AI score0.00303EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/07 12:00 a.m.•10 views

The vulnerability of the Markdown Parsing component of the JetBrains YouTrack software suite for managing projects and tasks allows attackers to perform cross-site scripting attacks.

The vulnerability of the Markdown Parsing component in the JetBrains YouTrack project management and task management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.003EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/07 12:00 a.m.•17 views

A vulnerability in the configuration of the CI/CD application deployment and continuous integration system JetBrains TeamCity allows a hacker to execute cross-site scripting attacks.

The vulnerability in the configuration of CI/CD system’s backup settings in JetBrains TeamCity exists due to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.01409EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/07 12:00 a.m.•11 views

The vulnerability of the JetBrains YouTrack project management and task management software, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the JetBrains YouTrack project management and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.003EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/07 12:00 a.m.•17 views

The vulnerability of the git_connect_git function in the connect.c component of the distributed version control system Git allows a attacker to access confidential data.

The vulnerability of the gitconnectgit function in the connect.c component of a distributed version control system is related to the lack of security measures for the web page structure. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

7.8CVSS7AI score0.02874EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/06 12:00 a.m.•12 views

The vulnerability of the image-sharing function in Jitsi Meet software allows a hacker to upload arbitrary GIF files.

The vulnerability of the image-sharing function in Jitsi Meet software for video conferencing involves a lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to upload arbitrary GIF files using giphy...

7.8CVSS5.6AI score0.00534EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2024/11/04 2:15 a.m.•17 views

CVE-2024-20117

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681...

4.4CVSS0.00078EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/04 2:15 a.m.•14 views

CVE-2024-20117

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681...

4.4CVSS5.9AI score0.00078EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/04 1:49 a.m.•68 views

CVE-2024-20124

A security vulnerability exists in vdec related to MediaTek Chipsets , where an out-of-bounds read occurs due to an improperly designed architecture/structure. This flaw could lead to local information disclosure . Exploitation requires System execution privileges and does not require user intera...

4.4CVSS6.2AI score0.00078EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/11/04 1:49 a.m.•35 views

CVE-2024-20122

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1572...

0.00078EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/10/31 9:55 p.m.•799 views

Exploit for Missing Authentication for Critical Function in Cyberpanel

CVE-2024-51567 Exploit Script CVE-2024-51567 is a Python...

10CVSS10AI score0.86633EPSS
SaveExploits7
Pen Test Partners Blog
Pen Test Partners Blog
•added 2024/10/31 6:15 a.m.•14 views

Mounting memory with MemProcFS for advanced memory forensics

Mounting memory? This changes everything! TL;DR Memory forensics is crucial for investigations, providing access to volatile data, like running processes and network connections. MemProcFS is a game-changer tool in memory forensics, allowing memory dumps to be mounted and browsed like file system...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/10/31 12:00 a.m.•13 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center (formerly known as Cisco Firepower Management Center) relates to the lack of protective measures for the SQL query structure, allowing an attacker to execute arbitrary code.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remote...

8.5CVSS6.1AI score0.00442EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/31 12:00 a.m.•16 views

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, due to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.01409EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/31 12:00 a.m.•14 views

The vulnerability of the web interface of DrayTek Vigor microprogramming software allows attackers to carry out cross-site scripting attacks.

The vulnerability of the web interface of DrayTek Vigor microprogramming software routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5CVSS5.5AI score0.003EPSS
SaveExploits0References3Affected Software24
BDU FSTEC
BDU FSTEC
•added 2024/10/31 12:00 a.m.•18 views

The vulnerability of the web conference component of the MiCollab collaboration platform allows a attacker to perform cross-site scripting attacks.

The vulnerability of the web conference component of the MiCollab collaboration platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.00316EPSS
SaveExploits0References3Affected Software1
Wiz blog
Wiz blog
•added 2024/10/30 3:00 p.m.•9 views

The essential steps for cloud vulnerability management

Prioritizing vulnerabilities in the cloud can be overwhelming - Learn how teams adopt a workflow structured for speed and accuracy...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/10/30 12:00 a.m.•14 views

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.00368EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/10/30 12:00 a.m.•15 views

The vulnerability of the Digital Platform “ForSight. Analytical Platform” arises from the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of the “Forrest. Analytical Platform” digital platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

6.8CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/30 12:00 a.m.•15 views

The vulnerability of the EdOnline EMS system allows a perpetrator to disclose protected information.

The vulnerability of the EdOnline EMS educational process management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

9.9CVSS5.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder