PT-2018-17530

Name of the Vulnerable Software and Affected Versions Joomla! Visual Calendar version 3.1.3 Description A SQL Injection issue exists in the Visual Calendar component for Joomla!. This issue is exploitable via the id parameter in a "view=load" action. Recommendations For version 3.1.3, avoid using...

CVE-2018-6395: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action...

CVE-2018-6398: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...

GoAhead Web Server 2.5 < 3.6.5 - HTTPd LD_PRELOAD Arbitrary Module Load Exploit

This Metasploit module triggers an arbitrary shared library load vulnerability in GoAhead web server versions between 2.5 and that have the CGI module enabled. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Apache NiFi Sensitive Information Disclosure Vulnerability

Apache NiFi is a data streaming based data processing and distribution system. A security vulnerability in Apache NiFi's handling of HTTP requests allows remote attackers to exploit the vulnerability by submitting a special request to load NiFi to load resources from an external server...

The vulnerability of the post_load function in the QEMU hardware-emulation driver’s hw/input/ps2.c file allows a hacker to perform out-of-buffer reading operations in dynamic memory.

The vulnerability of the postload function in the QEMU hardware-emulation emulator’s hw/input/ps2.c file is related to incorrect validation of input data. Exploiting this vulnerability allows a remote attacker to perform out-of-buffer read operations on dynamic memory...

GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Arbitrary Module Load (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GoAhead Web Server LDPRELOAD Arbitrary Module Load', 'Description' = %q This module triggers an arbitrary shared library load vulnerability in...

GoAhead Web Server LD_PRELOAD Arbitrary Module Load

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GoAhead Web Server LDPRELOAD Arbitrary Module Load', 'Description' = %q This module triggers an arbitrary shared library load vulnerability in...

[SECURITY] Fedora 27 Update: bind-dyndb-ldap-11.1-8.fc27

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

OpenJDK: GTK library loading use-after-free (AWT, 8185325)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

Microsoft Edge Chakra JIT Loop Analysis Bug

Microsoft Edge: Chakra: JIT: Loop analysis bug CVE-2018-0777 Here's the PoC demonstrating OOB write. function optarr, start, end for let i = start; i end; i++ if i === 10 i += 0; // -- a arri = 2.3023e-320; function main let arr = new Array100; arr.fill1.1; for let i = 0; i 1000; i++ optarr, 0, 3...

PT-2018-3833

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.7 Description The issue is related to an error in the kodak radc load raw function, specifically with the buf variable, which can cause an out-of-bounds read memory access, leading to a crash. This can be exploite...

PT-2018-6600

Name of the Vulnerable Software and Affected Versions: Muviko version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the email parameter to "login.php", the season id parameter to "themes/flixer/ajax/loa...

Kentico CMS 11.0 - Buffer Overflow

Kentico CMS 11.0 - Buffer Overflow Document Title: =============== Kentico CMS v11.0 - Stack Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1943 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5282 CVE-ID: =======...

Kentico CMS 11.0 - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Document Title: =============== Kentico CMS v11.0 - Stack Buffer Overflow Vulnerability CVE-ID: ======= CVE-2018-5282 Vulnerability Class: ==================== Buffer Overflow Current Estimated Price: ======================== 2.000€ - 3.000€...

Kentico Load XML Configuration Module Buffer Overflow Vulnerability

Kentico is the United States Kentico Software Corporation's set of ASP.NET-based content management system CMS. Kentico CMS Controls is used to edit and control a variety of elements in the web page . Load XML Configuration moudle is one of the XML upload configuration module . A stack buffer...

PT-2018-5777 · Freedesktop.Org +4 · Xdg-User-Dirs +4

Name of the Vulnerable Software and Affected Versions: xdg-user-dirs versions prior to 0.15.5 Description: A issue was found where the system umask policy is not being honored when creating XDG user directories. This occurs because Xsession sources xdg-user-dirs.sh before setting the umask policy...

CVE-2017-15883

Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via vectors related to weak cryptography...

OracleVM 3.4 : microcode_ctl (OVMSA-2018-0003)

The remote OracleVM system is missing necessary patches to address critical security updates : - Enable early microcode load to allow updating Broadwell model 79 - Make sure 'modprobe microcode' is not executed on Broadwell model 79 - Run dracut upon microcode update - Update Intel CPU microde fo...

Experts Weigh In On Spectre Patch Challenges

The race to patch against the Meltdown and Spectre processor vulnerabilities disclosed last week is on. As of today, there are no known exploits in the wild impacting vulnerable Intel, AMD and ARM devices. Currently, vendors are focused on three main mitigation efforts. Patches that address the...