UBUNTU-CVE-2014-5282

Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'...

DEBIAN-CVE-2014-5282

Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'...

CVE-2014-5282

Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'...

Exploit for Uncontrolled Resource Consumption in Wordpress

CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Dow...

Exploit for Uncontrolled Resource Consumption in Wordpress

CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Dow...

WordPress Core Load Script Denial of Service (CVE-2018-6389)

A Denial of Service vulnerability exists within WordPress Core Load Script. This vulnerability is due to the way WordPress handles large array loads. Successful exploitation could lead to a denial of service...

PT-2018-4263

Name of the Vulnerable Software and Affected Versions Docker versions prior to 1.3 Description The issue arises from improper validation of image IDs, allowing remote attackers to redirect to another image by loading untrusted images via 'docker load'. Recommendations For Docker versions prior to...

CVE-2014-5282: Improper Input Validation

Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'...

Unpatched DoS Flaw Could Help Anyone Take Down WordPress Websites

A simple yet serious application-level denial of service DoS vulnerability has been discovered in WordPress CMS platform that could allow anyone to take down most WordPress websites even with a single machine—without hitting with a massive amount of bandwidth, as required in network-level DDoS...

WordPress Core load-scripts.php Denial Of Service

import requests import sys import threading import random import re import argparse host='' headersuseragents= requestcounter=0 printedMsgs = def printMsgmsg: if msg not in printedMsgs: print "\n"+msg + " after %i requests" % requestcounter printedMsgs.appendmsg def useragentlist: global...

WordPress Core - load-scripts.php Denial of Service

WordPress Core - load-scripts.php Denial of Service EDB Note: python doser.py -g...

WordPress Core - 'load-scripts.php' Denial of Service

EDB Note: python doser.py -g...

VMSA-2018-0007:VMware Virtual Appliance updates address side-channel analysis due to speculative execution

VMSA-2018-0007.6 VMware Virtual Appliance updates address side-channel analysis due to speculative execution VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0007.6 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Virtual Appliance...

PT-2018-17669

Name of the Vulnerable Software and Affected Versions OpenMPT versions prior to 1.27.04.00 libopenmpt versions prior to 0.3.6 Description The issue is caused by an out-of-bounds read that occurs when processing a malformed STP file in the soundlib/Load stp.cpp component. This can potentially lead...

Software Defined Radio Attack Tool: RFCrack

RFCrack is my personal RF test bench, it was developed for testing RF communications between any physical device that communicates over sub Ghz frequencies. IoT devices, Cars, Alarm Systems etc… Testing was done with the Yardstick One on OSX, but RFCrack should work fine in linux. Current support...

PT-2018-17624

Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.12.0 Description The issue allows remote attackers to cause a denial of service via a crafted PDF document. This is due to the pdf load obj stm function in pdf/pdf-xref.c referencing the object stream recursively, which...

Huawei TripAdvisor Catwalk App Loads Arbitrary URL Vulnerability

TripAdvisor offers a wealth of travel planning and booking features, as well as powerful offline downloads and local services, making it a "must-have" tool for your outbound travel. A load arbitrary URL vulnerability exists in the Huawei TripAdvisor Catwalk application due to insufficient paramet...

CVE-2018-6398

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...

CVE-2018-6395

SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action...

PT-2018-17533

Name of the Vulnerable Software and Affected Versions Joomla! CP Event Calendar version 3.0.1 Description A SQL Injection issue exists in the CP Event Calendar component for Joomla!. This issue is exploitable via the id parameter in a "task=load" action. Recommendations For version 3.0.1, avoid...