|
Il servizio offre uno strumento semplice e rapido per l'autovalutazione per il calcolo del rischio cibernetico. Il... |
Il servizio si prefigge di individuare comportamenti tipici dei ransomware quali, ad esempio, la cifratura di una... |
Il servizio analizza gruppi di email file (formato .eml) per identificare le email indesiderate (SPAM). Il servizio... |
Il servizio offre un sondaggio per la verifica della conformità di un’organizzazione al GDPR (General Data Protection... |
| Published | Description | |
|---|---|---|
| CVE-2020-12856 |
18-05-2020 04:15:00 |
OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used. |
| CVE-2019-20798 |
18-05-2020 00:15:00 |
An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About page in the default configuration of the web server and its administrator panel. The XSS in the administrator panel can be used to reconfigure the server and execute arbitrary commands. |
| CVE-2019-20801 |
18-05-2020 00:15:00 |
An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks authorization control. Any web site can execute JavaScript code (that accesses a user's data) via cross-origin requests. |
| CVE-2020-13128 |
18-05-2020 00:15:00 |
An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service. |
| CVE-2019-20802 |
18-05-2020 00:15:00 |
An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to steal a user's data. This requires user interaction because there is no known direct way for an attacker to create a crafted directory name on a victim's device. However, a crafted directory name can occur if a victim extracts a ZIP archive that was provided by an attacker. |
| Date | Title | Platform | Author |
|---|---|---|---|
|
28-04-2020 |
CloudMe 1.11.2 - Buffer Overflow (PoC) | windows | Andy Bowden |
|
28-04-2020 |
School ERP Pro 1.0 - 'es_messagesid' SQL Injection | php | Besim |
|
28-04-2020 |
NVIDIA Update Service Daemon 1.0.21 - 'nvUpdatusService' Unquoted Service Path | windows | Roberto Piña |
|
28-04-2020 |
School ERP Pro 1.0 - Remote Code Execution | php | Besim |
|
28-04-2020 |
Docker-Credential-Wincred.exe - Privilege Escalation (Metasploit) | windows | Metasploit |
Italiano
English