Italiano
English
Niccolò Maggioni (corso di laurea in Informatica UniFi), Ion Farima (corso di laurea in Informatica UniFi), Lorenzo Coppi (ITIS Antonio Meucci, Firenze), Riccardo Degli Esposti (ITIS Antonio Meucci, Firenze) sono i quattro “hacker” toscani che hanno vinto le selezioni regionali per partecipare...
NOTIZIE
SERVIZI
|
Il servizio mostra una rappresentazione 3D del traffico di rete relativo ad attacchi ad una honeypot a Pisa. Inoltre,... |
Il servizio offre la possibilità di cercare informazioni, note pubblicamente, relative a vulnerabilità di sicurezza... |
Il servizio raccoglie informazioni relative ad exploit pubblici aggiornati giornalmente attraverso il repository... |
Il servizio analizza un log di richieste DNS e identifica se all’interno sono stati risolti dei nomi a dominio che... |
ULTIMI CVE
| Published | Description | |
|---|---|---|
| CVE-2013-7472 |
15-06-2019 19:29:00 |
The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow parameter. |
| CVE-2019-12840 |
15-06-2019 16:29:00 |
In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi. |
| CVE-2019-12839 |
15-06-2019 16:29:00 |
In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration (txtSendmailPath parameter) that allows authenticated attackers to achieve arbitrary command execution. |
| CVE-2019-12835 |
15-06-2019 15:29:00 |
formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xml_memory_writer::write via characters that require escaping. |
| CVE-2019-12831 |
15-06-2019 14:29:00 |
In MyBB before 1.8.21, an attacker can abuse a default behavior of MySQL on many systems (that leads to truncation of strings that are too long for a database column) to create a PHP shell in the cache directory of a targeted forum via a crafted XML import, as demonstrated by truncation of aaaaaaaaaaaaaaaaaaaaaaaaaa.php.css to aaaaaaaaaaaaaaaaaaaaaaaaaa.php with a 30-character limit, aka theme import stylesheet name RCE. |
Pages
ULTIMI EXPLOIT
| Date | Title | Platform | Author |
|---|---|---|---|
|
14-06-2019 |
Aida64 6.00.5100 - 'Log to CSV File' Local SEH Buffer Overflow | windows | Nipun Jaswal |
|
14-06-2019 |
CentOS 7.6 - 'ptrace_scope' Privilege Escalation | linux | s4vitar |
|
13-06-2019 |
Pronestor Health Monitoring < 8.1.11.0 - Privilege Escalation | windows | PovlTekstTV |
|
13-06-2019 |
Sitecore 8.x - Deserialization Remote Code Execution | aspx | Jarad Kopf |
|
12-06-2019 |
FusionPBX 4.4.3 - Remote Command Execution | php | Dustin Cobb |