Italiano
English
Esce oggi il Cybersecurity Act, nuovo strumento normativo europeo che punta a stabilire delle regole per una sicurezza informatica più coesa e comunitaria. Si tratta di un Regolamento che ha lo scopo di creare un quadro europeo ben definito sulla certificazione della sicurezza informatica di...
NEWS
SERVICES
|
This service identifies typical ransomware behaviours such as file ciphering. Differently from signature-based anti-... |
The service analyzes a DNS request log and detects if there are domain names which can be generated by a Domain... |
An onthology represents an important resource for the organisation of a domain's knowledge in a more detailed way by... |
This service analyses sets of email file in .eml format to identify the unsolicited ones (SPAM). Moreover, the service... |
LATEST CVE
| Published | Description | |
|---|---|---|
| CVE-2019-9229 |
19-07-2019 20:15:11 |
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers can authenticate with the default 1234 password that cannot be changed, and can execute malicious and unauthorized actions. |
| CVE-2019-12934 |
19-07-2019 20:15:11 |
An issue was discovered in the wp-code-highlightjs plugin through 0.6.2 for WordPress. wp-admin/options-general.php?page=wp-code-highlight-js allows CSRF, as demonstrated by an XSS payload in the hljs_additional_css parameter. |
| CVE-2018-17210 |
19-07-2019 20:15:11 |
An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass the session checks (that would otherwise logout a low-privileged user) by calling the core print job components directly via crafted HTTP GET and POST requests. |
| CVE-2019-9228 |
19-07-2019 19:15:11 |
** DISPUTED ** An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The (1) management SSH and (2) management TELNET features allow remote attackers to cause a denial of service (connection slot exhaustion) via 5 unauthenticated connection attempts, because the maximum number of unauthenticated clients that can be configured is 5. NOTE: the vendor's position is that this is a "design choice." |
| CVE-2019-13569 |
19-07-2019 19:15:11 |
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system. |
Pages
LATEST EXPLOIT
| Date | Title | Platform | Author |
|---|---|---|---|
|
19-07-2019 |
Web Ofisi Firma Rehberi 1 - 'il' SQL Injection | linux | Ahmet Ümit BAYRAM |
|
19-07-2019 |
Web Ofisi Emlak 3 - 'emlak_durumu' SQL Injection | linux | Ahmet Ümit BAYRAM |
|
19-07-2019 |
Web Ofisi Emlak 2 - 'ara' SQL Injection | linux | Ahmet Ümit BAYRAM |
|
19-07-2019 |
Web Ofisi Firma 13 - 'oz' SQL Injection | linux | Ahmet Ümit BAYRAM |
|
19-07-2019 |
Web Ofisi E-Ticaret 3 - 'a' SQL Injection | linux | Ahmet Ümit BAYRAM |