Aggregator
CVE-2016-1808 | Apple iOS up to 9.3.1 Disk Images memory corruption (HT206568 / Nessus ID 91228)
6 months 2 weeks ago
A vulnerability was found in Apple iOS up to 9.3.1. It has been rated as critical. This issue affects some unknown processing of the component Disk Images. The manipulation leads to memory corruption.
The identification of this vulnerability is CVE-2016-1808. Local access is required to approach this attack. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
Молодёжь Франции в кибертисках хакеров: на кону гигабайты личных данных
6 months 2 weeks ago
Слабая защита поставила под угрозу целое поколение.
CVE-2015-0969 | SearchBlox up to 8.1 _cluster/health pretty=true information disclosure (VU#697316 / ID 123539)
6 months 2 weeks ago
A vulnerability was found in SearchBlox up to 8.1. It has been classified as problematic. Affected is an unknown function of the file _cluster/health. The manipulation of the argument pretty=true leads to information disclosure.
This vulnerability is traded as CVE-2015-0969. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2008-5990 | Eduforge emergecolab 1.0 sitecode path traversal (EDB-6551 / XFDB-45369)
6 months 2 weeks ago
A vulnerability classified as critical has been found in Eduforge emergecolab 1.0. Affected is an unknown function. The manipulation of the argument sitecode leads to path traversal.
This vulnerability is traded as CVE-2008-5990. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2008-5992 | Jetik Jetik Emlak Sistem A 2.0 diger.php KayitNo sql injection (EDB-6549 / XFDB-45391)
6 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in Jetik Jetik Emlak Sistem A 2.0. Affected by this issue is some unknown functionality of the file diger.php. The manipulation of the argument KayitNo leads to sql injection.
This vulnerability is handled as CVE-2008-5992. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2008-6414 | Aj Square AJ Auction 2.0 detail.php item_id sql injection (EDB-6550 / XFDB-45399)
6 months 2 weeks ago
A vulnerability has been found in Aj Square AJ Auction 2.0 and classified as critical. This vulnerability affects unknown code of the file detail.php. The manipulation of the argument item_id leads to sql injection.
This vulnerability was named CVE-2008-6414. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2008-6405 | Greatclone Hotscripts Clone showcategory.php cid sql injection (EDB-6545 / XFDB-45362)
6 months 2 weeks ago
A vulnerability has been found in Greatclone Hotscripts Clone and classified as critical. Affected by this vulnerability is an unknown functionality of the file showcategory.php. The manipulation of the argument cid leads to sql injection.
This vulnerability is known as CVE-2008-6405. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2008-6407 | Brian Wilson ol bookmarks manager 0.7.5 frame.php framefile path traversal (EDB-6547 / BID-31348)
6 months 2 weeks ago
A vulnerability was found in Brian Wilson ol bookmarks manager 0.7.5. It has been classified as critical. This affects an unknown part of the file frame.php. The manipulation of the argument framefile leads to path traversal.
This vulnerability is uniquely identified as CVE-2008-6407. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2008-6408 | Brian Wilson ol bookmarks manager 0.7.5 frame.php framefile code injection (EDB-6547 / XFDB-45367)
6 months 2 weeks ago
A vulnerability was found in Brian Wilson ol bookmarks manager 0.7.5. It has been declared as critical. This vulnerability affects unknown code of the file frame.php. The manipulation of the argument framefile leads to code injection.
This vulnerability was named CVE-2008-6408. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2008-6409 | Brian Wilson ol bookmarks manager 0.7.5 index.php id sql injection (EDB-6547 / XFDB-45368)
6 months 2 weeks ago
A vulnerability was found in Brian Wilson ol bookmarks manager 0.7.5. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument id leads to sql injection.
The identification of this vulnerability is CVE-2008-6409. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2008-6410 | Brian Wilson ol bookmarks manager up to 0.7.5 show.php show path traversal (EDB-6543 / BID-31348)
6 months 2 weeks ago
A vulnerability classified as critical has been found in Brian Wilson ol bookmarks manager up to 0.7.5. Affected is an unknown function of the file show.php. The manipulation of the argument show leads to path traversal.
This vulnerability is traded as CVE-2008-6410. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com
Name That Edge Toon: Aerialist's Choice
6 months 2 weeks ago
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
John Klossner, Cartoonist
雷神众测漏洞周报2024.10.28-2024.11.03
6 months 2 weeks ago
雷神众测拥有该文章的修改和解释权。如欲转载或传播此文章,必须保证此文章的副本,包括版权声明等全部内容。声明雷神众测允许,不得任意修改或增减此文章内容,不得以任何方式将其用于商业目的。
报名启动!你必须要知道的补天广州沙龙门票获取方式!
6 months 2 weeks ago
补天白帽城市沙龙-广州站门票获取方式公布!速速围观~
Solving the painful password problem with better policies
6 months 2 weeks ago
Weak and reused credentials continue to plague users and organizations. Learn from Specops software about why passwords are so easy to hack and how organizations can fortify their security efforts. [...]
Sponsored by Specops Software
CVE-2024-45888 | DrayTek Vigor 3900 1.5.1.3 cgi-bin/mainfunction.cgi set_ap_map_config action command injection
6 months 2 weeks ago
A vulnerability classified as critical was found in DrayTek Vigor 3900 1.5.1.3. This vulnerability affects the function set_ap_map_config of the file cgi-bin/mainfunction.cgi. The manipulation of the argument action leads to command injection.
This vulnerability was named CVE-2024-45888. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2024-45893 | DrayTek Vigor 3900 1.5.1.3 cgi-bin/mainfunction.cgi setSWMOption action command injection
6 months 2 weeks ago
A vulnerability classified as critical has been found in DrayTek Vigor 3900 1.5.1.3. This affects the function setSWMOption of the file cgi-bin/mainfunction.cgi. The manipulation of the argument action leads to command injection.
This vulnerability is uniquely identified as CVE-2024-45893. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2024-51685 | Michael Gangolf Accordion title for Elementor Plugin up to 1.2.1 on WordPress cross site scripting
6 months 2 weeks ago
A vulnerability was found in Michael Gangolf Accordion title for Elementor Plugin up to 1.2.1 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting.
This vulnerability is handled as CVE-2024-51685. The attack may be launched remotely. There is no exploit available.
vuldb.com
Live Webinar | Reimagine Your Cloud Transformation Journey
6 months 2 weeks ago