Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity

Vulnerability of the Java Runtime Environment, related to program subcomponents. Exploiting this vulnerability allows an unauthorized attacker to compromise data confidentiality and integrity by using the subcomponent Deployment...

CVE-2016-0173

creationtimestamp| type| source ---|---|--- 2016-06-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39960 2026-07-29 12:01:43+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:02:00+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

南京擎天政务系统 /webpages/theme_service_list_page.aspx POST型sql注入

No description provided by source...

Telisca IPS Lock 2 Remote Phone Lock

a vulnerability in IPS LOCK , below is the description : Exploit Title: TELISCA IPS LOCK ABUSE Date: 13/01/2016 Software Link: http://www.telisca.com/products/ip-phone-apps/ipslock/ Exploit Author: Fakhir Karim Reda Contact: [email protected] Metasploit module :...

The vulnerability of Microsoft Edge browser allows a hacker to bypass existing access restrictions policies.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies...

CVE-2016-1749

creationtimestamp| type| source ---|---|--- 2016-03-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39607...

The IOT era rights abuse of the vulnerability of attack and Defense-bug warning-the black bar safety net

Permissions for the abuse of Vulnerability in addition to on android Real machine debugging scenario other than there are many other scenarios. In the field of Internet of things applications is particularly extensive. For example: a smart TV can be allowed remotely through the network debugging,...

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of graphical device interfaces in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

CVE-2015-8429

creationtimestamp| type| source ---|---|--- 2015-12-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39052...

KLA10729 Privilege escalation vulnerability in WinRAR

Improper files handling was found in WinRAR. By exploiting this vulnerability malicious users can execute arbitrary code with WinRAR privileges. This vulnerability can be exploited remotely via a specially designed archive. Technical details This vulnerability related to two WinRAR functions:one...

Microsoft Windows VBScript Filter Function Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on applications using the VBScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability ...

CVE-2015-5273

CVE-2015-5273 affects ABRT and libreport: the abrt-action-install-debuginfo-to-abrt-cache helper allows a local attacker to write arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp. Public advisories (RHSA/CESA) and distributed sec...

Vimeo: Stored XSS on player.vimeo.com

Description The page loaded for the Vimeo embedded player prints the Name of the owner of the video in Javascript context. Some characters are escaped, like " but others like , and - if the video is public - any Vimeo user can be affected by the Javascript code that is loaded. However, there is a...

up.time 7.5.0 - Arbitrary File Disclose and Delete

up.time 7.5.0 - Arbitrary File Disclose and Delete up.time 7.5.0 Arbitrary File Disclose And Delete Exploit Vendor: Idera Inc. Product web page: http://www.uptimesoftware.com Affected version: 7.5.0 build 16 and 7.4.0 build 13 Summary: The next-generation of IT monitoring software. Desc: Input...

The vulnerability of the Flash Player software allows attackers to carry out attacks related to memory cell addressing errors.

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to perform attacks involving memory cell address errors...

Django Denial of Service Vulnerability (CNVD-2015-04477)

Django is a set of Django Software Foundation based on the Python language open source Web application framework. The framework includes object-oriented mapper , view system , template system and so on. A denial of service vulnerability exists in Django. An attacker can exploit this vulnerability...

From inter to intra: gaining reliability

Posted by Chris Evans, avoider of crossing heap lines. Part 2 of 4. In the first post in this series, we concluded with a traditional exploit for Adobe Flash bug 324, and noted that it could never be 100% reliable. We also challenged ourselves to do better! Is there some way we can leverage the...

Cisco TelePresence IP Gateway Cross-Site Request Forgery Vulnerability

A vulnerability in the Cisco TelePresence IP Gateway Series could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to insufficient cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking the user of a web...

OpenLitespeed 1.3.9 - Use-After-Free (Denial of Service)

OpenLitespeed 1.3.9 - Use-After-Free Denial of Service / Openlitespeed 1.3.9 Use After Free denial of service exploit. This exploit triggers a denial of service condition within the Openlitespeed web server. This is achieved by sending a tampered request contain a large number 91 of 'a: a' header...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the samba-test-devel-4.1.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited...