Lucene search
+L

8351 matches found

Openbugbounty
Openbugbounty
•added 2017/06/15 4:08 p.m.•20 views

rrts.com XSS vulnerability

Open Bug Bounty ID: OBB-248529 Description| Value ---|--- Affected Website:| rrts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Prion
Prion
•added 2017/06/13 6:29 a.m.•33 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an...

4.3CVSS5.9AI score0.01242EPSS
SaveExploits0References4Affected Software2
osv_cve
osv_cve
•added 2017/06/13 6:29 a.m.•25 views

CVE-2017-6661

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an...

6.1CVSS5.7AI score0.01242EPSS
SaveExploits0References4
Fedora
Fedora
•added 2017/06/11 11:33 p.m.•37 views

[SECURITY] Fedora 25 Update: perltidy-20170521-1.fc25

Perltidy is a Perl script that indents and re-formats Perl scripts to make them easier to read. If you write Perl scripts, or spend much time reading them, you will probably find it useful. The formatting can be controlled with command line parameters. The default parameter settings approximately...

5.5CVSS0.1AI score0.0032EPSS
SaveExploits0
Fedora
Fedora
•added 2017/06/11 9:52 p.m.•38 views

[SECURITY] Fedora 24 Update: perltidy-20170521-1.fc24

Perltidy is a Perl script that indents and re-formats Perl scripts to make them easier to read. If you write Perl scripts, or spend much time reading them, you will probably find it useful. The formatting can be controlled with command line parameters. The default parameter settings approximately...

5.5CVSS0.1AI score0.0032EPSS
SaveExploits0
Fedora
Fedora
•added 2017/06/09 7:53 p.m.•57 views

[SECURITY] Fedora 26 Update: perltidy-20170521-1.fc26

Perltidy is a Perl script that indents and re-formats Perl scripts to make them easier to read. If you write Perl scripts, or spend much time reading them, you will probably find it useful. The formatting can be controlled with command line parameters. The default parameter settings approximately...

5.5CVSS0.1AI score0.0032EPSS
SaveExploits0
CERT
CERT
•added 2017/06/08 12:00 a.m.•64 views

CalAmp LMU-3030 devices may not authenticate SMS interface

Overview OBD-II devices are used to provide telematics information for managers of fleets of vehicles. One type of device, manufactured by CalAmp, has an SMS text message interface. We have found multiple deployments where no password was configured for this interface by the integrator / reseller...

9.3CVSS8.4AI score0.02021EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2017/06/08 12:00 a.m.•49 views

Cisco Email Security Appliance Message Tracking Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. SPDX-FileCopyrightText: 2017 Greenbo...

6.1CVSS6AI score0.01242EPSS
SaveExploits0References1
Circl
Circl
•added 2017/05/27 3:33 p.m.•31 views

CVE-2017-5869

creationtimestamp| type| source ---|---|--- 2017-05-27 15:33:15+00:00| seen| https://t.me/webamoozir/1866 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:58+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

8.8CVSS7.3AI score0.34585EPSS
SaveExploits7References1
CNVD
CNVD
•added 2017/05/24 12:00 a.m.•18 views

Samsung Account Information Disclosure Vulnerability

Samsung account is a mobile client from Samsung South Korea that allows users to experience Samsung services. With Samsung account mobile, you can enjoy more functional features such as cell phone location, cell phone tracking and so on. Samsung Account suffers from an information disclosure...

8CVSS6.4AI score0.00806EPSS
SaveExploits0References1
Schneier on Security
Schneier on Security
•added 2017/05/23 7:19 p.m.•18 views

ICE is Using Stingray to Track Illegal Immigrants

According to court documents, US Immigration and Customs Enforcement is using Stingray cell-site simulators to track illegal immigrants...

7AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2017/05/22 8:24 p.m.•35 views

proj4: Stack-buffer-overflow in pj_open_lib_ex

Detailed report: https://oss-fuzz.com/testcase?key=6058391271112704 Project: proj4 Fuzzer: aflproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: aflasanproj4 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f2bb94a2421 Crash State: pjopenlibex...

7AI score
SaveExploits0Affected Software1
Circl
Circl
•added 2017/05/22 12:00 a.m.•55 views

CVE-2017-4915

creationtimestamp| type| source ---|---|--- 2017-05-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42045 2017-05-23 12:53:32+00:00| seen| https://t.me/webamoozir/1842 2018-05-29 15:50:33+00:00| seen|...

7.8CVSS7.3AI score0.05413EPSS
SaveExploits12References4
CNVD
CNVD
•added 2017/05/20 12:00 a.m.•5 views

SQL Injection Vulnerability in Eview GPS Tracking Platform System name Parameter

Eview GPS Tracking Platform System is an online tracking system from Eview. A SQL injection vulnerability exists in the name parameter of the Eview GPS Tracking Platform System, which can be exploited by attackers to obtain sensitive database information using commonly used SQL injection tools...

7.7AI score
SaveExploits0
Kitploit
Kitploit
•added 2017/05/17 11:43 p.m.•40 views

Major Update of Acunetix Online

Acunetix Online has undergone a mammoth update, now enjoying all the features and benefits found in Acunetix On Premise, including: Integrated vulnerability management, greater manageability of threats and targets and the integration of popular WAFs and Issue Tracking systems. Acunetix Online als...

7.3AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2017/05/16 6:39 a.m.•13 views

WikiLeaks Reveals Two CIA Malware Frameworks

WikiLeaks released details on what it claims are two frameworks for malware samples dubbed AfterMindnight and Assassin, both allegedly developed by the U.S. Central Intelligence Agency. The revelations come amid worldwide efforts to squelch variants of the WannaCry ransomware, an offensive hackin...

7.2AI score
SaveExploits0References4
Cisco Threats
Cisco Threats
•added 2017/05/15 8:01 p.m.•37 views

Threat Outbreak Alert RuleID29121: Email Messages Distributing Malicious Software on May 15, 2017

Medium Alert ID: 53831 First Published: 2017 May 15 20:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29121 may contain the following files: Name | Size...

0.4AI score
SaveExploits0
Circl
Circl
•added 2017/05/15 12:00 a.m.•44 views

CVE-2017-6553

creationtimestamp| type| source ---|---|--- 2017-05-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42010 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/questpmmasterdbof.rb 2025-02-06 03:13:43+00:00| seen|...

10CVSS7.9AI score0.42292EPSS
SaveExploits3References2
Qualys Blog
Qualys Blog
•added 2017/05/13 12:29 a.m.•108 views

How to Rapidly Identify Assets at Risk to WannaCry Ransomware and ETERNALBLUE Exploit

In what may be the first public weaponizing of April's Shadow Brokers dump of NSA exploits, a ransomware attack has crippled IT systems globally and disrupted operations at major organizations, including patient services at UK hospitals. About 80,000 infections have been detected in about 100...

7.6AI score
SaveExploits0
Prion
Prion
•added 2017/05/11 2:29 p.m.•14 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none...

7.1AI score
SaveExploits0
Rows per page
Query Builder