Italiano
English
Esce oggi il Cybersecurity Act, nuovo strumento normativo europeo che punta a stabilire delle regole per una sicurezza informatica più coesa e comunitaria. Si tratta di un Regolamento che ha lo scopo di creare un quadro europeo ben definito sulla certificazione della sicurezza informatica di...
NEWS
SERVICES
|
The service offers a platform that allows Registrars to check for any performance and security problems present on... |
The service detects malicious signatures in analysed files, by scanning it with 57 different commercial anti-malware.... |
This service shows statistics related to Tweets related to Cyber-Security, allowing to search them by keywords such as... |
The service offers a survey to check the compliance of an organization with the GDPR (General Data Protection... |
LATEST CVE
| Published | Description | |
|---|---|---|
| CVE-2019-9229 |
19-07-2019 20:15:11 |
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers can authenticate with the default 1234 password that cannot be changed, and can execute malicious and unauthorized actions. |
| CVE-2019-12934 |
19-07-2019 20:15:11 |
An issue was discovered in the wp-code-highlightjs plugin through 0.6.2 for WordPress. wp-admin/options-general.php?page=wp-code-highlight-js allows CSRF, as demonstrated by an XSS payload in the hljs_additional_css parameter. |
| CVE-2018-17210 |
19-07-2019 20:15:11 |
An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass the session checks (that would otherwise logout a low-privileged user) by calling the core print job components directly via crafted HTTP GET and POST requests. |
| CVE-2019-9228 |
19-07-2019 19:15:11 |
** DISPUTED ** An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The (1) management SSH and (2) management TELNET features allow remote attackers to cause a denial of service (connection slot exhaustion) via 5 unauthenticated connection attempts, because the maximum number of unauthenticated clients that can be configured is 5. NOTE: the vendor's position is that this is a "design choice." |
| CVE-2019-13569 |
19-07-2019 19:15:11 |
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system. |
Pages
LATEST EXPLOIT
| Date | Title | Platform | Author |
|---|---|---|---|
|
19-07-2019 |
Web Ofisi Firma Rehberi 1 - 'il' SQL Injection | linux | Ahmet Ümit BAYRAM |
|
19-07-2019 |
Web Ofisi Emlak 3 - 'emlak_durumu' SQL Injection | linux | Ahmet Ümit BAYRAM |
|
19-07-2019 |
Web Ofisi Emlak 2 - 'ara' SQL Injection | linux | Ahmet Ümit BAYRAM |
|
19-07-2019 |
Web Ofisi Firma 13 - 'oz' SQL Injection | linux | Ahmet Ümit BAYRAM |
|
19-07-2019 |
Web Ofisi E-Ticaret 3 - 'a' SQL Injection | linux | Ahmet Ümit BAYRAM |