Lucene search
+L

9030 matches found

n0where
n0where
•added 2018/07/02 5:06 p.m.•150 views

Firewall and Privatizing Proxy: macOS Fortress

macOS-Fortress is a Firewall, Blackhole, and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers. It is Kernel-level, OS-level, and client-level security for macOS. Built to address a steady stream of attacks visible on snort and server logs, as well as blocks ads, malicious...

6.9AI score
SaveExploits0References7
CNVD
CNVD
•added 2018/06/27 12:00 a.m.•86 views

Spring Framework Cross-Site Tracking Vulnerability

Pivotal Spring Framework is the United States Pivotal Software's set of open source Java, Java EE application framework. The framework helps developers build high-quality applications . A security vulnerability exists in Pivotal Spring Framework versions 5.0.x prior to 5.0.7, 4.3.x prior to 4.3.1...

5.9CVSS6AI score0.02769EPSS
SaveExploits0References1
Circl
Circl
•added 2018/06/25 10:31 p.m.•18 views

CVE-2018-9160

creationtimestamp| type| source ---|---|--- 2018-06-25 22:31:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/httpsickragepasswordleak.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:09+00:00|...

9.8CVSS8.2AI score0.75602EPSS
SaveExploits7References1
HackRead
HackRead
•added 2018/06/22 4:47 p.m.•57 views

Flight tracking service Flightradar24 hacked; 230,000 accounts affected

By Waqas One of the largest flight tracking services, Flightradar24, which shows This is a post from HackRead.com Read the original post: Flight tracking service Flightradar24 hacked; 230,000 accounts affected...

2.6AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/06/20 1:35 p.m.•11 views

tracking-board.com XSS vulnerability

Open Bug Bounty ID: OBB-634473 Description| Value ---|--- Affected Website:| tracking-board.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
CNVD
CNVD
•added 2018/06/20 12:00 a.m.•12 views

botbait Information Disclosure Vulnerability

botbait is a tool used in the npm ecosystem for tracking bot and automation tool usage. An information disclosure vulnerability exists in botbait. An attacker could exploit this vulnerability to disclose information...

5.3CVSS4.9AI score0.00866EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/06/19 12:00 a.m.•19 views

Enigmail Arbitrary Email Signature Forgery Vulnerability

Enigmail is a security extension for Mozilla Thunderbird and Seamonkey developed by the Enigmail team that supports composing and receiving emails signed and encrypted via secure signing and encryption signing and encrypting using the OpenPGP standard, and provides GUI configuration and OpenPGP k...

7.5CVSS7.8AI score0.02059EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/17 3:37 p.m.•32 views

Security Bulletin: Multiple vulnerabilities in zlib affect IBM Tivoli Composite Application Manager for Transactions (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843)

Summary There are multiple vulnerabilities in zlib that is used by IBM Tivoli Composite Application Manager for Transactions. Vulnerability Details Relevant CVE Information: CVEID: CVE-2016-9840 DESCRIPTION: zlib is vulnerable to a denial of service, caused by an out-of-bounds pointer arithmetic ...

9.8CVSS1.9AI score0.0755EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/17 3:26 p.m.•40 views

Security Bulletin: A vulnerability in Apache Xerces-C XML Parser library affects IBM Tivoli Composite Application Manager for Transactions (CVE-2016-0729 )

Summary Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by improper bounds checking during processing and error reporting. By sending specially crafted input documents, an attacker could exploit this vulnerability to cause the library to crash or possibly execute...

9.8CVSS1.6AI score0.09115EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/16 7:47 p.m.•26 views

Security Bulletin: IBM Tealeaf Customer Experience internal connections not encrypted (CVE-2015-4961)

Summary Internal connections between IBM Tealeaf Customer Experience servers use unencrypted HTTP. Vulnerability Details CVEID: CVE-2015-4961 DESCRIPTION: In an IBM Tealeaf environment with multiple servers, connections to the Tealeaf Data Service, Search Service, Replay Service, and Tracking...

2.9CVSS0.5AI score0.00471EPSS
SaveExploits0Affected Software1
n0where
n0where
•added 2018/06/16 9:24 a.m.•33 views

Satellite Tracking Application: Gpredict

Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...

0.1AI score
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2018/06/11 5:21 p.m.•24 views

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5669907504037888 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

5.8AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2018/06/10 10:53 p.m.•32 views

Gpredict - Satellite Tracking Application

Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...

6.8AI score
SaveExploits0References1
NVD
NVD
•added 2018/06/08 6:29 p.m.•15 views

CVE-2018-4221

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates...

7.5CVSS6.3AI score0.01224EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2018/06/08 6:29 p.m.•12 views

CVE-2018-4221

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates...

7.5CVSS5.8AI score0.01224EPSS
SaveExploits0References4
Prion
Prion
•added 2018/06/08 6:29 p.m.•23 views

Code injection

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates...

5CVSS6.2AI score0.01224EPSS
SaveExploits0References4Affected Software2
CVE
CVE
•added 2018/06/08 6:00 p.m.•104 views

CVE-2018-4221

CVE-2018-4221 affects Apple products: iOS before 11.4 and macOS before 10.13.5, in the Security component. The issue allows websites to track users by abusing the transmission/validation of S/MIME client certificates. Public docs in the Apple security updates reference show this vulnerability und...

7.5CVSS6.1AI score0.01224EPSS
SaveExploits0References4Affected Software2
Positive Technologies
Positive Technologies
•added 2018/06/08 12:00 a.m.•3 views

PT-2018-16489

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 Description The issue involves the Security component and allows websites to track users by leveraging the transmission of S/MIME client certificates. Recommendations For iOS versions...

7.5CVSS0.01224EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2018/06/07 1:29 p.m.•42 views

CVE-2018-7689

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions...

7.1CVSS6.8AI score0.01208EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2018/06/07 2:29 a.m.•20 views

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5.3CVSS5.8AI score0.00866EPSS
SaveExploits0References1
Rows per page
Query Builder