|
Un’ontologia rappresenta una risorsa per organizzare la conoscenza di un dominio in maniera più dettagliata attraverso... |
Il servizio utilizza una raccolta di tweet provenienti da utenti appartenenti a Twitter i cui tweet utilizzano parole... |
Servizio Rilevazione Malware. Il servizio permette di rilevare comportamenti malevoli in file (ad esempio, eseguibili o... |
Il servizio raccoglie informazioni relative ad exploit pubblici aggiornati giornalmente attraverso il repository... |
| Published | Description | |
|---|---|---|
| CVE-2017-18638 |
11-10-2019 19:15:10 |
send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server request any resource. The response to this SSRF request is encoded into an image file and then sent to an e-mail address that can be supplied by the attacker. Thus, an attacker can exfiltrate any information. |
| CVE-2019-17176 |
11-10-2019 17:15:08 |
Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, ClientNickNameColor, Email, email, or email_address parameter). |
| CVE-2019-17509 |
11-10-2019 16:15:17 |
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php. |
| CVE-2019-17508 |
11-10-2019 16:15:17 |
On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable. |
| CVE-2019-17507 |
11-10-2019 16:15:17 |
An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dir_login.asp"' line in a .asp file. This provides access to d_status.asp, version.asp, d_dhcptbl.asp, and d_acl.asp. |
| Date | Title | Platform | Author |
|---|---|---|---|
|
07-10-2019 |
logrotten 3.15.1 - Privilege Escalation | linux | Wolfgang Hotwagner |
|
04-10-2019 |
LabCollector 5.423 - SQL Injection | php | Carlos Avila |
|
04-10-2019 |
Android - Binder Driver Use-After-Free | android | Google Security Research |
|
03-10-2019 |
PHP 7.0 < 7.3 (Unix) - 'gc' Disable Functions Bypass | php | mm0r1 |
|
03-10-2019 |
AnchorCMS < 0.12.3a - Information Disclosure | multiple | Tijme Gommers |
Italiano
English