Lucene search
+L

7012 matches found

Tenable Nessus
Tenable Nessus
added 2020/12/30 12:00 a.m.55 views

Foxit PhantomPDF < 9.7.5 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.7.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

8.8CVSS6.8AI score0.70388EPSS
SaveExploits5References8
Gitee
Gitee
added 2020/12/22 10:48 a.m.104 views

Exploit for CVE-2013-0422

K8tools 2020628 声明: 工具仅供安全研究或授权渗透,非法用途后果自负。 下载: https://github.com/k8gege/K8tools 文档: http://k8gege.org PS: 不定期更新,文件比较大,可按需下载。工具有BUG或建议可直接Github上留言 提权工具均可在远控Cmd或WebShell运行,大部份经过修改编译兼容性稳定性更好 注意:不保证永久有效,喜欢自行保存。 综合工具 + 反弹工具 Ladon 6.6.6 反弹MSF/NC ShellTCP/HTTP/HTTPS + 扫描工具 Ladon 6.6 SMB漏洞检测 SMBGhost...

10CVSS6.5AI score0.99913EPSS
SaveExploits289
RedHat Linux
RedHat Linux
added 2020/12/21 12:46 p.m.99 views

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

5.9CVSS6.7AI score0.07051EPSS
SaveExploits3References2
RedHat Linux
RedHat Linux
added 2020/12/16 12:43 p.m.165 views

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

5.9CVSS6.7AI score0.07051EPSS
SaveExploits3References2
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/08 9:03 p.m.34 views

Security Bulletin: IBM InfoSphere Information Server is affected by an unescaped string injection in Dojo Toolkit

Summary An unescaped string injection vulnerability in Dojo Toolkit that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by...

9.8CVSS0.3AI score0.0254EPSS
SaveExploits2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:00 a.m.9 views

The vulnerability of the Open WebRTC Toolkit, a software development tool, arises from the implementation of incorrect control flow management, allowing attackers to enhance their privileges.

The vulnerability of the Open WebRTC Toolkit development tool is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

7.8CVSS7.7AI score0.01595EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2020/11/27 12:00 a.m.8 views

SAP NetWeaver-XML Toolkit for JAVA Information Disclosure Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver-XML Toolkit for JAVA ENGINEAPI. The vulnerabilit...

7.7CVSS6.1AI score0.01102EPSS
SaveExploits0References1
Schneier on Security
Schneier on Security
added 2020/11/24 12:01 p.m.39 views

On That Dusseldorf Hospital Ransomware Attack and the Resultant Death

Wired has a detailed story about the ransomware attack on a Dusseldorf hospital, the one that resulted in an ambulance being redirected to a more distant hospital and the patient dying. The police wanted to prosecute the ransomware attackers for negligent homicide, but the details were more...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2020/11/23 12:00 a.m.13 views

Intel Open WebRTC Toolkit Elevation of Privilege Vulnerability

Intel Open WebRTC Toolkit is a U.S. Intel Intel company based on the Gstreamer implementation of open source , cross-platform WebRTC client framework for end-to-end audio/video communication development toolkit . The toolkit is used to create high-performance, reliable and scalable real-time...

9.8CVSS7.3AI score0.01595EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/11/23 12:00 a.m.25 views

Debian: Security Advisory (DLA-2462-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.7AI score0.01485EPSS
SaveExploits1References4
Debian
Debian
added 2020/11/22 10:39 p.m.119 views

[SECURITY] [DLA 2462-1] cimg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2462-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 23, 2020 https://wiki.debian.org/LTS -...

8.1CVSS8.3AI score0.01485EPSS
SaveExploits1
Fedora
Fedora
added 2020/11/19 1:31 a.m.31 views

[SECURITY] Fedora 32 Update: raptor-1.4.21-33.fc32

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples...

7.1CVSS2.9AI score0.03117EPSS
SaveExploits1
Fedora
Fedora
added 2020/11/19 1:30 a.m.38 views

[SECURITY] Fedora 33 Update: raptor-1.4.21-33.fc33

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples...

7.1CVSS2.9AI score0.03117EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/11/19 12:00 a.m.33 views

CentOS: Security Advisory for qt5-qtbase (CESA-2020:5021)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS5.8AI score0.0399EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2020/11/18 5:24 p.m.286 views

qt, qt5 security update

CentOS Errata and Security Advisory CESA-2020:5021 An update for qt and qt5-qtbase is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

5.3CVSS6.9AI score0.0399EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2020/11/14 11:30 a.m.190 views

Linux-Evil-Toolkit - A Framework That Aims To Centralize, Standardize And Simplify The Use Of Various Security Tools For Pentest Professionals

Linux evil toolkit is a framework that aims to centralize, standardize and simplify the use of various security tools for pentest professionals. LETK Linux evil toolkit has few simple commands, one of which is the INIT that allows you to define a target, and thus use all the tools without typing...

7.6AI score
SaveExploits0References1
NVD
NVD
added 2020/11/13 8:15 p.m.30 views

CVE-2020-12338

Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

9.8CVSS9.7AI score0.01595EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/13 8:15 p.m.21 views

CVE-2020-12338

Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

9.8CVSS7.4AI score
SaveExploits0References1
Prion
Prion
added 2020/11/13 8:15 p.m.21 views

Design/Logic Flaw

Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

7.5CVSS9.5AI score0.01595EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/13 8:00 p.m.30 views

CVE-2020-12338

Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

9.8AI score0.01595EPSS
SaveExploits0References1
Rows per page
Query Builder