6526 matches found
PT-2017-4654
CVE-2025-14715 - CVE-2008-4251: Adobe Flash Player Unvalidated Redirects CVE ID : CVE-2025-14715 Published : Dec. 25, 2025, 11:15 p.m. | 2 hours, 10 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the...
DEBIAN-CVE-2017-0350
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges...
CVE-2017-3162
HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0...
Code injection
HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0...
CVE-2017-3162
HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0...
elfintils 'elflint.c' file denial of service vulnerability
elfutils is a collection of utilities and libraries for reading, creating and modifying ELF binaries. A security vulnerability exists in the elflint.c file in elfutils version 0.168. Since the program fails to validate the number of sections and segments. A remote attacker could cause a denial of...
Unvalidated DOM redirect
Web applications occasionally use DOM input values to store the address of the page to which the client will be redirected -- for example: yoursite.com//?redirect=www.yoursite.com/404.asp An unvalidated redirect occurs when the client is able to modify the affected parameter value and thus contro...
GNU Binutils 'swap_std_reloc_out()' Function Remote Denial of Service Vulnerability
GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...
Amazon S3 Open Redirect
Exploit Title: Amazon Simple Storage Service S3 - Open Redirect Vulnerability Google Dork: inurl:psiphon/landing-page-redirect/redirect.html?landingPage= Date: 2017-03-29 Exploit Author: Ghostman [email protected] My Team: Zero Security Group Vendor Homepage: https://aws.amazon.com/s3/...
AppSamvid DLL Load Native Code Execution Vulnerability
AppSamvid is a C-DAC application whitelisting software for Microsoft Windows based operating systems. Whitelisting allows only pre-approved files to be executed on the operating system. This is in contrast to traditional signature-based antivirus software methods that blacklist virus files. A loa...
Cisco Prime Service Catalog Cross-Site Scripting Vulnerability (CNVD-2017-03681)
Cisco Prime Service Catalog PSC is a service catalog solution from Cisco that provides all IT services through a single web portal. The solution supports automated ordering of computing, networking, storage, and other data center resources in a unified service catalog. web framework is one of the...
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-03859)
Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...
CVE-2017-6465
Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation...
WordPress Multiple Plugins - Arbitrary File Upload
WordPress Multiple Plugins - Arbitrary File Upload import requests import random import string print "---------------------------------------------------------------------" print "Multiple Wordpress Plugin - Remote File Upload Exploit\nDiscovery: Larry W. Cashdollar\nExploit Author: Munir...
SonicDICOM PACS Cross-Site Request Forgery Vulnerability
SonicDICOM is a PACS software from JIUN Corporation that combines the functionality of DICOM with a web browser based on DICOM Viewer. A cross-site request forgery vulnerability exists in SonicDICOM. The application program interface allows a user to perform certain actions via an HTTP request...
New Relic: Unvalidated redirect in alerts.newrelic.com/auth/newrelic?origin=
Affected host: alerts.newrelic.com Affected resource: /auth/newrelic Affected GET parameter: origin PoC: 1. Go to https://alerts.newrelic.com/auth/newrelic?origin=.example.com 2. If you don't have an active session, you'll need to login with your New Relic credentials 3. You'll be taken to...
CVE-2017-3896
Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated...
CVE-2017-3896
Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated...
CVE-2017-3896
Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated...
CVE-2017-3896
CVE-2017-3896 concerns McAfee Agent’s remote log viewer: an unvalidated parameter in the remote log viewing capability (in 5.0.x before 5.0.4.449) allows an unauthenticated, remote attacker to submit crafted URLs, triggering a denial-of-service. Connected sources corroborate the flaw and fix path...