Lucene search
+L

100 matches found

Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.37 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER RotateFromCenter Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7.1AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.19 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER ScaleFromCenter Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7.1AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.23 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite TKGIS FindPortFromIndex Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.20 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddTabShapeEmptyPage Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.26 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddFloatUserProperty Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.20 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddDoubleUserProperty Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS2.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.13 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW MoveShape Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7.1AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.21 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER StartRichTextEdit Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7.1AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.42 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddShapePoint Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.27 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite TKGIS CloneShape Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.23 views

(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCSIMPLE PositionShape Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of UCanCode E-XD++ Visualization Enterprise Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.8CVSS7AI score
SaveExploits0References1
Node.js
Node.js
added 2016/12/01 7:33 p.m.45 views

Downloads Resources over HTTP

Overview Affected versions of xd-testing insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

9.3CVSS6.2AI score0.01752EPSS
SaveExploits0Affected Software1
ICS
ICS
added 2016/11/03 12:0 a.m.41 views

Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-308-02A Schneider Electric Magelis HMI Resource Consumption Vulnerabilities that was published November 22, 2016, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of a public report of resource consumption...

7.8CVSS0.04301EPSS
SaveExploits1References21
NVD
NVD
added 2014/09/27 1:55 a.m.17 views

CVE-2014-6740

The XD Forum aka com.tapatalk.xdforumcomforum application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
added 2014/09/27 1:55 a.m.16 views

Design/Logic Flaw

The XD Forum aka com.tapatalk.xdforumcomforum application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2014/09/27 1:0 a.m.39 views

CVE-2014-6740

The CVE-2014-6740 issue affects the Android XD Forum app (com.tapatalk.xdforumcomforum) version 3.9.17, where the app does not verify X.509 certificates from SSL servers. This behavior enables man‑in‑the‑middle attackers to spoof servers and potentially exfiltrate sensitive information via a craf...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2014/09/27 1:0 a.m.20 views

CVE-2014-6740

The XD Forum aka com.tapatalk.xdforumcomforum application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
0day.today
0day.today
added 2012/09/08 12:0 a.m.64 views

AcmlmBoard XD version 2.2.3 SQL Injection Vulnerability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Home: 1337day.com Inj3ct0r Exploit DataBase + Exploit Title: AcmlmBoard XD version 2.2.3 SQL Injection Vulnerability + Date: 08-09-2012 + Category: WebApp + Google Dork: intext:Powered by AcmlmBoard XD thread.php?pid...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/05/11 12:0 a.m.41 views

AgentX++ Master - AgentX::receive_agentx Stack Buffer Overflow (Metasploit)

$Id: agentxppreceiveagentx.rb 9279 2010-05-11 01:56:20Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

10CVSS5.8AI score0.58051EPSS
SaveExploits12
NVD
NVD
added 2007/01/30 6:28 p.m.18 views

CVE-2007-0597

Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message...

5CVSS6.1AI score0.01345EPSS
SaveExploits1References4
Rows per page
Query Builder