Lucene search
+L

19889 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/23 12:00 a.m.20 views

The vulnerability of the check_token function in the web server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the checktoken function in the web server of the programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code using a specially crafted request...

10CVSS6.3AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:00 a.m.9 views

The vulnerability of the serial interface converter NPort IAW5250A-6I/O, related to information disclosure, allows a hacker to gain access to information about the web server.

The vulnerability of the NPort IAW5250A-6I/O serial interface converter is related to information disclosure. Exploiting this vulnerability can allow a remote attacker to disclose information about the web server...

5CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:00 a.m.9 views

The vulnerability of the check_password function in the web server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the checkpassword function in the web server of the programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code using a specially crafted reque...

10CVSS6.3AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:00 a.m.7 views

The vulnerability of the web-server of the programmable logic controller ioLogik, related to the output of an operation beyond the buffer in memory, allows a intruder to cause a service failure or execute arbitrary code.

The vulnerability of the web-server-based programmable logic controller ioLogik lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary code using a specially crafted request...

7.8CVSS6.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:00 a.m.20 views

The vulnerability of the check_cookie function in the web server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the checkcookie function in the web server of the programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code using a specially crafted reques...

10CVSS6.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:00 a.m.11 views

The vulnerability of the web-server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the web-server-based programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a specially crafted request...

10CVSS6.3AI score
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/22 9:15 p.m.7 views

CVE-2021-32004

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning...

5.3CVSS6.2AI score0.00622EPSS
SaveExploits0References2
NVD
NVD
added 2021/11/22 9:15 p.m.24 views

CVE-2021-32004

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning...

5.3CVSS0.00622EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/22 9:15 p.m.19 views

Input validation

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning...

5CVSS5.2AI score0.00622EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/11/22 8:32 p.m.81 views

CVE-2021-32004

The CVE-2021-32004 issue affects Secomea GateManager (all versions prior to 9.6). The root cause is an improper check of the host header in GateManager's web server, which can allow an attacker to poison a browser cache. Impact described across sources indicates potential for cache poisoning with...

5.3CVSS4.7AI score0.00622EPSS
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2021/11/22 7:14 p.m.89 views

Imunify360 Bug Leaves Linux Web Servers Open to Code Execution, Takeover

A high-severity security vulnerability in CloudLinux’s Imunify360 cybersecurity platform could lead to arbitrary code execution and web-server takeover, according to researchers. Imunify360 is a security platform for Linux-based web servers that allows users to configure various settings for...

9.3CVSS8.2AI score0.01393EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2021/11/22 12:00 a.m.14 views

PT-2022-11303 · Alt Linux · Alt Linux

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient escaping of the LaTeX preamble, which allows site administrators to read files available to the HTTP server system...

9.8CVSS5.8AI score0.52299EPSS
SaveExploits18References100
CNNVD
CNNVD
added 2021/11/22 12:00 a.m.10 views

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager, which stems from an improper host header check in Secomea GateManager's web server that could lead an attacker to poison the browser cache...

5.3CVSS5.8AI score0.00622EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/11/19 12:00 a.m.29 views

Jenkins Git Plugin < 4.8.3 XSS

According to its its self-reported version number, the version of the Jenkins Git Plugin running on the remote web server is prior to 4.8.3. It is, therefore, affected by a cross-site scripting vulnerability due to it not escaping the Git SHA-1 checksum parameters provided to commit notifications...

6.1CVSS6.3AI score0.01237EPSS
SaveExploits0References2
Huntr
Huntr
added 2021/11/15 5:47 a.m.16 views

in jitsi/jicofo

Description misconfigurations of nginx lead to a path traversal vulnerability. Proof of Concept according to https://github.com/jitsi/jicofo/blob/master/doc/shibboleth.md?plain=1L251 a request to /shibboleth-sp../ can get any file under /usr/share Impact An attacker can access files on the web...

1.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/11/15 12:00 a.m.15 views

The vulnerability of the embedded web-server microprogramming software for Hikvision cameras allows a intruder to execute arbitrary commands.

The vulnerability of Hikvision’s embedded web-server-based IP camera software relates to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

10CVSS8.2AI score0.99869EPSS
SaveExploits24References5Affected Software68
GithubExploit
GithubExploit
added 2021/11/14 2:30 p.m.17 views

Exploit for CVE-2017-17562

GoAhead Web Server 2.5 use multi/handler msf6 exploitmulti/h...

8.1CVSS7.2AI score0.96327EPSS
SaveExploits15
OSV
OSV
added 2021/11/12 10:15 p.m.10 views

CVE-2021-3790

A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device...

6.5CVSS6.1AI score0.00404EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/12 10:15 p.m.23 views

Buffer overflow

A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device...

3.3CVSS6.6AI score0.00404EPSS
SaveExploits0References1Affected Software4
ATTACKERKB
ATTACKERKB
added 2021/11/12 10:15 p.m.12 views

CVE-2021-3790

A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device...

6.5CVSS6.8AI score0.00404EPSS
SaveExploits0References2
Rows per page
Query Builder