475 matches found
Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2018-08444)
Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. An unspecified vulnerability exists in the Core component of Oracle VM VirtualBox. An attacker could explo...
Zonemaster Web GUI Cross-Site Scripting Vulnerability
Zonemaster Web GUI is an open source Web graphical user interface in the Zonemaster project . A cross-site scripting vulnerability exists in the lib/Zonemaster/GUI/Dancer/Export.pm file in Zonemaster Web GUI. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...
Unspecified Vulnerability in Papenmeier WiFi Baby Monitor Free&Lite
Papenmeier WiFi Baby Monitor Free&Lite is a mobile application for wireless baby monitor from Papenmeier, Germany. A security vulnerability exists in Papenmeier WiFi Baby Monitor Free&Lite. A remote attacker can exploit the vulnerability by sending requests to TCP ports 8258 and 8257 to obtain...
Node.js third-party modules: `macaddress` concatenates unsanitized input into exec() command
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! I would like to report code injection i...
Asus_GlobalWirteOverflow
Vulnerability: Global buffer overflow in networkmap ------------------------------------------ Exploitation: Can write data at any address in heap ------------------------------------------ Vendor of Product: Asus wireless router ------------------------------------------ Affected Products and...
Perspective ICM Investigation & Case 5.1.1.16 - Privilege Escalation Vulnerability
Exploit for windows platform in category web applications Exploit Title: Privilege Escalation - Perspective ICM Investigation & Case - 5.1.1.16 Date Reported to vendor: Jun 28, 2017 Date Accepted by vendor: Jun 11, 2017 Exploit Author: email protected Vendor Homepage: www.resolver.com Version:...
Tuleap 9.6 Second-Order PHP Object Injection Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------- Tuleap getPreferenceself::PREFERENCERECENTELEMENTS 1427. if $recentelements = unserialize$recentelements 1428. if isarray$recentelements 1429. return $recentelements; 1430. 1431...
Escort Marketplace 1.0 - SQL Injection
Exploit Title: Escort Website Script 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/escort-website Demo: http://escortwebsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...
CVE-2016-2565
Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to read sent e-mail messages, aka SVE-2015-5081...
CVE-2017-0070
creationtimestamp| type| source ---|---|--- 2017-03-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41623...
PHP 'ext/mysqli/mysqli.c' Denial of Service Vulnerability
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. PHP...
BlueZ Local Buffer Overflow Vulnerability
BlueZ is an official Bluetooth stack for Linux. A local buffer overflow vulnerability exists in BlueZ 5.41 and earlier versions. An attacker could exploit this vulnerability to cause an affected application to crash, resulting in a denial of service or execution of arbitrary code...
Infoblox Network Automation HTTP Response Splitting Vulnerability
Infoblox Network Automation is a suite of automated network configuration and change management software from Infoblox USA. An HTTP response splitting vulnerability exists in Infoblox Network Automation versions 7.0.1 and 6.9.2, which can be exploited by an attacker to affect or tamper with web...