Lucene search
K

1165 matches found

Kitploit
Kitploit
added 2021/02/07 8:30 p.m.66 views

COM-Code-Helper - Two IDAPython Scripts Help You To Reconstruct Microsoft COM (Component Object Model) Code

Two IDAPython Scripts help you to reconstruct Microsoft COM Component Object Model Code Especially malware reversers will find this useful, as COM Code is still regularly found in malware. ClassAndInterfaceToNames.py This IDAPython script scans an idb file for class and interfaces UUIDs and creat...

7.6AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.1 views

The vulnerability in the JavaScript programming language implementation of the Mozilla Firefox browser allows attackers to perform cross-site scripting attacks.

The vulnerability in the JavaScript implementation of the Mozilla Firefox browser is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.1CVSS6.8AI score0.00468EPSS
Exploits0References7Affected Software3
Fedora
Fedora
added 2021/01/05 1:26 a.m.66 views

[SECURITY] Fedora 33 Update: perl-Convert-ASN1-0.27-21.fc33

Convert::ASN1 encodes and decodes ASN.1 data structures using BER/DER rules...

7.5CVSS2.1AI score0.01057EPSS
Exploits1
Fedora
Fedora
added 2020/12/02 10:40 a.m.25 views

[SECURITY] Fedora 32 Update: perl-Convert-ASN1-0.27-19.fc32

Convert::ASN1 encodes and decodes ASN.1 data structures using BER/DER rules...

7.5CVSS2.1AI score0.01057EPSS
Exploits1
GithubExploit
GithubExploit
added 2020/11/16 5:24 p.m.191 views

Exploit for CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHubh...

10CVSS8.3AI score0.9438EPSS
Exploits75
BDU FSTEC
BDU FSTEC
added 2020/11/12 12:0 a.m.1 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary SQL queries against the database in the target system and gain access to protected information.

The vulnerability of the Magento Commerce development and management software platform lies in the lack of measures to protect SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database in the target system by sending a...

8.5CVSS7.5AI score0.00257EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.1 views

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in the lack of protection for operational data, which allows attackers to exploit this weakness to disclose protected information.

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data, such as catalog structures, thereby exposing tha...

5.3CVSS5.9AI score0.00206EPSS
Exploits0References3Affected Software1
Mozilla
Mozilla
added 2020/10/20 12:0 a.m.81 views

Security Vulnerabilities fixed in Firefox 82 — Mozilla

A use-after-free bug in the usersctp library was reported upstream. We assume this could have led to memory corruption and a potentially exploitable crash. In the crossbeam rust crate, the bounded channel incorrectly assumed that Vec::fromiter had allocated capacity that was the same as the numbe...

9.8CVSS0.5AI score0.03197EPSS
Exploits1References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:0 a.m.1 views

Vulnerability of software packages for monitoring and data collection: MC Works64/MC Works32, FrameWorX server, centralized configuration environment for HMI-/SCADA applications, Platform Services software platform, GenBroker64/GenBroker32 application for managing access rights. This vulnerability allows a malicious actor to trigger a service failure.

The vulnerabilities of the software packages for supervisory control and data collection MC Works64/MC Works32, the FrameWorX server, the centralized configuration environment for HMI-/SCADA applications, the Platform Services software platform, and the GenBroker64/GenBroker32 application for...

7.8CVSS7.2AI score0.00201EPSS
Exploits0References5Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:0 a.m.2 views

Vulnerability of software packages for monitoring and data collection: MC Works64/MC Works32, FrameWorX server, centralized configuration environment for HMI-/SCADA applications, Platform Services software platform, GenBroker64/GenBroker32 application for managing access rights. This vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure.

The vulnerabilities of the software packages for supervisory control and data collection, MC Works64/MC Works32, the FrameWorX server, the centralized configuration environment for HMI-/SCADA applications, the Platform Services software platform, and the GenBroker64/GenBroker32 application for...

10CVSS7.1AI score0.02869EPSS
Exploits0References4Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/10/01 12:0 a.m.4 views

The vulnerability of the wash_uri function (rcube_washtml.php) in the RoundCube Webmail email client allows an attacker to compromise the integrity of data by exploiting vulnerabilities in the security measures protecting web page structures.

The vulnerability of the washuri function in the RoundCube Webmail client is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

6.1CVSS6.9AI score0.00704EPSS
Exploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/10/01 12:0 a.m.1 views

The vulnerability of the Jackson-databind library in the FasterXML project, related to the restoration of unreliable data structures in memory, allows attackers to execute arbitrary code.

The vulnerability of the Jackson-databind library in the FasterXML project is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

10CVSS7.5AI score0.00956EPSS
Exploits0References7Affected Software8
Fedora
Fedora
added 2020/09/25 5:16 p.m.52 views

[SECURITY] Fedora 33 Update: jctools-3.1.0-1.fc33

This project aims to offer some concurrent data structures currently missing from the JDK: =EF=BF=BD=EF=BF=BD SPSC/MPSC/SPMC/MPMC Bounded lock free queues =EF=BF=BD=EF=BF=BD SPSC/MPSC Unbounded lock free queues =EF=BF=BD=EF=BF=BD Alternative interfaces for queues =EF=BF=BD=EF=BF=BD Offheap...

9.1CVSS3.8AI score0.17932EPSS
Exploits3
RedhatCVE
RedhatCVE
added 2020/09/22 6:39 p.m.26 views

CVE-2020-25603

A security flaw was found in Xen. Event channels control structures can be accessed without lock as long as the port is considered to be valid. A malicious guest may be able to cause a hypervisor crash resulting in a denial of service DoS. An information leak and privilege escalation cannot be...

7.8CVSS1.5AI score0.00072EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2020/09/21 7:24 a.m.141 views

Exploit for CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHubh...

10CVSS8.1AI score0.9438EPSS
Exploits75
GithubExploit
GithubExploit
added 2020/09/15 2:29 p.m.16 views

Exploit for CVE-2020-1472

CVE-2020-1472 - Zero-Logon POC !alt texthttps://github.com...

10CVSS8.4AI score0.9438EPSS
Exploits75
GithubExploit
GithubExploit
added 2020/09/15 2:29 p.m.265 views

Exploit for CVE-2020-1472

CVE-2020-1472 - Zero-Logon POC !alt texthttps://github.com...

10CVSS8.2AI score0.9438EPSS
Exploits75
BDU FSTEC
BDU FSTEC
added 2020/08/19 12:0 a.m.1 views

The vulnerability of the RoundCube Webmail email client, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the RoundCube Webmail email client is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

4.7CVSS6.8AI score0.00872EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/08/19 12:0 a.m.1 views

The vulnerability of the RoundCube Webmail email client, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the RoundCube Webmail email client is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

4.7CVSS6.8AI score0.71819EPSS
Exploits2References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/08/14 12:0 a.m.1 views

The vulnerability of the WordPress website content management system, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

5.4CVSS6.7AI score0.01427EPSS
Exploits0References5Affected Software2
Rows per page
Query Builder