|
Il servizio offre uno strumento semplice e rapido per l'autovalutazione per il calcolo del rischio cibernetico. Il... |
Il servizio mostra una rappresentazione 3D del traffico di rete relativo ad attacchi ad una honeypot a Pisa. Inoltre,... |
Il servizio utilizza una raccolta di tweet provenienti da utenti appartenenti a Twitter i cui tweet utilizzano parole... |
Servizio Rilevazione Malware. Il servizio permette di rilevare comportamenti malevoli in file (ad esempio, eseguibili o... |
| Published | Description | |
|---|---|---|
| CVE-2018-19120 |
29-11-2018 16:29:00 |
The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address. |
| CVE-2018-15537 |
29-11-2018 16:29:00 |
Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests. |
| CVE-2018-19748 |
29-11-2018 16:29:00 |
app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&root= directory traversal. The value of the root parameter must be base64 encoded (note that base64 encoding, instead of URL encoding, is very rare in a directory traversal attack vector). |
| CVE-2018-19655 |
29-11-2018 00:29:01 |
A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file. |
| CVE-2018-19654 |
29-11-2018 00:29:00 |
An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a duplicate username, as demonstrated by use of the test%c2 string when a test account already exists. |
| Date | Title | Platform | Author |
|---|---|---|---|
|
29-10-2018 |
Point of Sales (POS) in VB.Net MySQL Database 1.0 - SQL Injection | php | Ihsan Sencan |
|
29-10-2018 |
Open Faculty Evaluation System 5.6 - 'batch_name' SQL Injection | php | Ihsan Sencan |
|
29-10-2018 |
systemd - reexec State Injection | linux | Google Security Research |
|
29-10-2018 |
ASRock Drivers - Privilege Escalation | windows | SecureAuth |
|
29-10-2018 |
Modbus Slave 7.0.0 - Denial of Service (PoC) | windows | Ihsan Sencan |
Italiano
English