Italiano
English
La cybersecurity si impara da piccoli. Più di 1000 bambini (1007 per l’esattezza) delle scuole primarie e delle scuole secondarie di primo grado di tutta Italia durante quest’anno scolastico hanno potuto scoprire come navigare in maniera sicura e consapevole in Rete grazie ai laboratori sulla...
NOTIZIE
SERVIZI
|
Il Thesaurus offre una rappresentazione della conoscenza di un insieme di termini relativi alla Cybersecurity,... |
Il servizio analizza un log di richieste DNS e identifica se all’interno sono stati risolti dei nomi a dominio che... |
Il servizio mostra una rappresentazione 3D del traffico di rete relativo ad attacchi ad una honeypot a Pisa. Inoltre,... |
Il servizio raccoglie informazioni relative ad exploit pubblici aggiornati giornalmente attraverso il repository... |
ULTIMI CVE
| Published | Description | |
|---|---|---|
| CVE-2019-10652 |
30-03-2019 10:29:00 |
An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature. |
| CVE-2019-10650 |
30-03-2019 10:29:00 |
In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file. |
| CVE-2019-10649 |
30-03-2019 10:29:00 |
In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file. |
| CVE-2019-10648 |
30-03-2019 09:29:00 |
Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL. |
| CVE-2019-10647 |
30-03-2019 09:29:00 |
ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the plugins/ueditor/php/controller.php?action=catchimage source[] parameter because of a lack of inc/zzz_file.php restrictions. For example, source%5B%5D=http%3A%2F%2F192.168.0.1%2Ftest.php can be used if the 192.168.0.1 web server sends the contents of a .php file (i.e., it does not interpret a .php file). |
Pages
ULTIMI EXPLOIT
| Date | Title | Platform | Author |
|---|---|---|---|
|
27-12-2018 |
Craft CMS 3.0.25 - Cross-Site Scripting | php | Raif Berkay Dincel |
|
27-12-2018 |
ShareAlarmPro 2.1.4 - Denial of Service (PoC) | windows_x86 | T3jv1l |
|
24-12-2018 |
WSTMart 2.0.8 - Cross-Site Request Forgery (Add Admin) | php | linfeng |
|
24-12-2018 |
Adobe Flash ActiveX Plugin 28.0.0.137 - Remote Code Execution (PoC) | windows | smgorelik |
|
24-12-2018 |
FrontAccounting 2.4.5 - 'SubmitUser' SQL Injection | php | Sainadh Jamalpur |