10421 matches found
Design/Logic Flaw
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF...
CVE-2019-8982
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF...
CVE-2019-8982
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF...
CVE-2019-8982
WaveMaker Studio 6.6 contains a vulnerability in StudioService.java (studioService.download?method=getContent&inUrl= value) that can cause local file disclosure and server-side request forgery (SSRF). The Nuclei template confirms Local File Inclusion/SSRF in WaveMaker Studio 6.6, affecting the co...
CVE-2019-8982
com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF...
Valentina Studio 9.0.5 Linux - Host Buffer Overflow (PoC)
Valentina Studio 9.0.5 Linux - Host Buffer Overflow PoC -- coding: utf-8 -- Exploit Title: Valentina Studio 9.0.5 Linux - 'Host' Buffer Overflow PoC Date: 20/02/2019 Author: Alejandra Sánchez Vendor Homepage: https://valentina-db.com/en/ Software Link:...
Valentina Studio 9.0.5 Linux - 'Host' Buffer Overflow (PoC)
-- coding: utf-8 -- Exploit Title: Valentina Studio 9.0.5 Linux - 'Host' Buffer Overflow PoC Date: 20/02/2019 Author: Alejandra Sánchez Vendor Homepage: https://valentina-db.com/en/ Software Link: https://www.valentina-db.com/en/all-downloads/vstudio/current/vstudiox64lin-deb?format=raw Version:...
Valentina Studio 9.0.5 Buffer Overflow
-- coding: utf-8 -- Exploit Title: Valentina Studio 9.0.5 Linux - 'Host' Buffer Overflow PoC Date: 20/02/2019 Author: Alejandra SA!nchez Vendor Homepage: https://valentina-db.com/en/ Software Link: https://www.valentina-db.com/en/all-downloads/vstudio/current/vstudiox64lin-deb?format=raw Version:...
Valentina Studio 9.0.5 Linux - Host Buffer Overflow Exploit
-- coding: utf-8 -- Exploit Title: Valentina Studio 9.0.5 Linux - 'Host' Buffer Overflow PoC Author: Alejandra Sánchez Vendor Homepage: https://valentina-db.com/en/ Software Link: https://www.valentina-db.com/en/all-downloads/vstudio/current/vstudiox64lin-deb?format=raw Version: 9.0.5 Tested on:...
Valentina Studio 9.0.4 - Host Denial of Service Exploit
Exploit Title: Valentina Studio 9.0.4 - Denial of Service PoC Discovery by: Victor Mondragón Vendor Homepage: https://valentina-db.com/en/ Software Link: https://valentina-db.com/en/developer/database/download-valentina-database-adk Tested Version: 9.0.4 Tested on: Windows 7 x64 Service Pack 1...
Valentina Studio 9.0.4 Denial Of Service
Exploit Title: Valentina Studio 9.0.4 - Denial of Service PoC Discovery by: Victor MondragA3n Discovery Date: 2018-02-19 Vendor Homepage: https://valentina-db.com/en/ Software Link: https://valentina-db.com/en/developer/database/download-valentina-database-adk Tested Version: 9.0.4 Tested on:...
Valentina Studio 9.0.4 - Host Denial of Service (PoC)
Valentina Studio 9.0.4 - Host Denial of Service PoC Exploit Title: Valentina Studio 9.0.4 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2018-02-19 Vendor Homepage: https://valentina-db.com/en/ Software Link:...
Valentina Studio 9.0.4 - 'Host' Denial of Service (PoC)
Exploit Title: Valentina Studio 9.0.4 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2018-02-19 Vendor Homepage: https://valentina-db.com/en/ Software Link: https://valentina-db.com/en/developer/database/download-valentina-database-adk Tested Version: 9.0.4 Tested on:...
Security Update for Microsoft Visual Studio Code (February 2019)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.31.1. It is, therefore, affected by a remote code execution vulnerability that exists due to how environment variables are processed. An attacker who successfully exploited the vulnerability could run...
Unspecified Vulnerability in AVEVA Group plc InduSoft Web Studio and InTouch Edge HMI (CNVD-2019-43392)
AVEVA Group plc InduSoft Web Studio and InTouch Edge HMI are both products of AVEVA Group plc, UK.InduSoft Web Studio is a suite of industrial configuration software.InTouch Edge HMI is a scalable HMI application. A security vulnerability exists in AVEVA Group plc InduSoft Web Studio versions pri...
Unspecified Vulnerability in AVEVA Group plc InduSoft Web Studio and InTouch Edge HMI
AVEVA Group plc InduSoft Web Studio is a suite of industrial configuration software from AVEVA Group plc, UK. A security vulnerability exists in AVEVA Group plc InduSoft Web Studio versions prior to 8.1 SP3 and prior to InTouch Edge HMI 2017 Update. An attacker could exploit the vulnerability to...
Microsoft Visual Studio Code Installed
Binary data microsoftvisualstudiocodeinstalled.nbin...
Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2021-28814)
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote code execution vulnerability exists in Microsoft Visual Studio, which can be exploited by a...
dotnet: Domain-spoofing attack in System.Uri
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'...