Lucene search
+L

8648 matches found

RedHat Linux
RedHat Linux
added 2014/10/30 7:45 p.m.7 views

php: multiple buffer over-reads in php_parserr

Multiple buffer over-read flaws were found in the phpparserr function of PHP. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to crash a PHP application that used the dnsgetrecord function to perform a DNS query...

6.8CVSS7.3AI score0.15427EPSS
SaveExploits0References4
Exploit DB
Exploit DB
added 2014/10/28 12:0 a.m.63 views

Enalean Tuleap 7.2 - XML External Entity File Disclosure

Vulnerability title: Tuleap = 7.2 External XML Entity Injection in Enalean Tuleap CVE: CVE-2014-7177 Vendor: Enalean Product: Tuleap Affected version: 7.2 and earlier Fixed version: 7.4.99.5 Reported by: Jerzy Kramarz Details: A multiple XML External Entity Injection has been found and confirmed...

6.5CVSS5.2AI score0.03324EPSS
SaveExploits12
myhack58
myhack58
added 2014/10/16 12:0 a.m.26 views

Sandworm(CVE-2 0 1 4-4 1 1 4 related to the threat of a comprehensive analysis of the report — and to chasing shadows Security Platform detection problem of the complex disk-vulnerability warning-the black bar safety net

1 threat card and introduction ! CVE-2 0 1 4-4 1 1 4 is in the OLE package Manager the INF arbitrary code execution vulnerability, the vulnerability affects Win Vista, Win7 and aboveoperating system, the attackers used PowerPoint as an attack vector, the vulnerability is in the Microsoft Windows...

3.8AI score
SaveExploits0
NVD
NVD
added 2014/10/15 10:55 p.m.24 views

CVE-2014-6520

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL...

4CVSS6.1AI score0.02644EPSS
SaveExploits0References4
Prion
Prion
added 2014/10/15 3:55 p.m.21 views

Design/Logic Flaw

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML...

4CVSS5.6AI score0.02667EPSS
SaveExploits0References4Affected Software6
UbuntuCve
UbuntuCve
added 2014/10/15 12:0 a.m.40 views

CVE-2014-6491

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500...

7.5CVSS6.7AI score0.05655EPSS
SaveExploits0References3
zdt
zdt
added 2014/10/14 12:0 a.m.276 views

DNS Reverse Lookup Shellshock Exploit

DNS reverse lookups can be used as a vector of attack for the bash shellshock vulnerability. DNS Reverse Lookup as a vector for the Bash vulnerability CVE-2014-6271 et.al. CVE-2014-3671 references: CVE-2014-6271, CVE-2014-7169, CVE-2014-6277, CVE-2014-6278 CVE-2014-7186 and, CVE-2014-7187 Summary...

10CVSS0.1AI score0.99999EPSS
SaveExploits165
Vulnerability Lab
Vulnerability Lab
added 2014/10/14 12:0 a.m.36 views

Files Document & PDF 2.0.2 iOS - Multiple Vulnerabilities

Document Title: =============== Files Document & PDF 2.0.2 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1341 Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID: ====================================...

0.5AI score
SaveExploits0
OSV
OSV
added 2014/10/01 2:55 p.m.4 views

DEBIAN-CVE-2012-0811

Multiple SQL injection vulnerabilities in Postfix Admin aka postfixadmin before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the pw parameter to the pacrypt function, when mysqlencrypt is configured, or 2 unspecified vectors that are used in backup files generate...

6.5CVSS8.6AI score0.01683EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2014/10/01 12:0 a.m.134 views

Bash Me Some More

Good morning! This is kinda long. == Background == If you are not familiar with the original bash function export vulnerability CVE-2014-6271, you may want to have a look at this article: http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html Well, long story short: the...

10CVSS0.1AI score0.99999EPSS
SaveExploits165
OSV
OSV
added 2014/09/30 2:55 p.m.2 views

DEBIAN-CVE-2014-7199

Cross-site scripting XSS vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and 1.23.x before 1.23.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file...

4.3CVSS5.9AI score0.01983EPSS
SaveExploits0References1
NVD
NVD
added 2014/09/28 1:55 a.m.12 views

CVE-2014-6754

The Vector Outage Manager aka nz.co.vector.outagemanager application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
added 2014/09/28 1:0 a.m.39 views

CVE-2014-6754

CVE-2014-6754 affects the Vector Outage Manager (nz.co.vector.outagemanager) Android app version 1.7. The vulnerability is that the app does not verify X.509 certificates when communicating with SSL servers, enabling man-in-the-middle attackers to spoof servers and capture sensitive information v...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2014/09/28 1:0 a.m.29 views

CVE-2014-6754

The Vector Outage Manager aka nz.co.vector.outagemanager application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2014/09/26 12:0 a.m.37 views

GS Foto Uebertraege 3.0 Local File Inclusion

Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ====================================...

7.4AI score
SaveExploits0
ThreatPost
ThreatPost
added 2014/09/25 4:30 p.m.74 views

Bash Vulnerability Exploits Dropping DDoS Bots

A honeypot run by researchers at AlienVault Labs has snared two separate pieces of malware attempting to exploit the Bash vulnerability. One sample is a repurposed IRC bot written in Perl that is trying to build a botnet to be used in distributed denial of service attacks DDoS, said Jaime Blasco,...

10CVSS0.99999EPSS
SaveExploits139References6
seebug.org
seebug.org
added 2014/09/15 12:0 a.m.1580 views

用友CRM注入漏洞(无需登录通杀所有版本)

简要描述: 用友某系统注入漏洞,无需登录,通杀所有版本 详细说明: 用友TurboCRM存在通用sql注入。 http://crm.varsal.com.cn:8081/login/login.php 如下图找到找回密码页 访问 http://crm.varsal.com.cn:8081/login/changepswd.php?orgcode=1&loginname=system 输入信息抓包 POST /login/changepswd.php?orgcode=1&loginname=system HTTP/1.1 Host: crm.varsal.com.cn:8081...

7.1AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
added 2014/09/11 12:0 a.m.29 views

Briefcase 4.0 iOS - Code Exec & File Include Vulnerability

Document Title: =============== Briefcase 4.0 iOS - Code Exec & File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1319 Release Date: ============= 2014-09-11 Vulnerability Laboratory ID VL-ID: ====================================...

0.6AI score
SaveExploits0
Hacker One
Hacker One
added 2014/09/09 8:51 p.m.32 views

Internet Bug Bounty: Flash Local Sandbox Bypass

Vulnerability already reported to adobe issue 2833 and patched CVE-2014-0554 http://helpx.adobe.com/security/products/flash-player/apsb14-21.html First of all, note that the Adobe Security Bulletin notes: 'Bas Venis and Masato Kinugawa' for the acknowledgement of this CVE. The poc I have reported...

10CVSS5.7AI score0.06903EPSS
SaveExploits0
htbridge
htbridge
added 2014/09/03 12:0 a.m.277 views

Two SQL Injections in All In One WP Security WordPress plugin

High-Tech Bridge Security Research Lab discovered two SQL injection vulnerabilities in All In One WP Security WordPress plugin, which can be exploited to perform SQL Injection attacks. Both vulnerabilities require administrative privileges, however can be also exploited by non-authenticated...

6.5CVSS0.6AI score0.04155EPSS
SaveExploits6Affected Software1
Rows per page
Query Builder