CVE-2019-6725

The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin...

PT-2019-12634 · Samsung · Containeragent +3

Name of the Vulnerable Software and Affected Versions: Samsung S9+, S10, and XCover 4 P version 9.0 Description: The issue affects Samsung devices, causing them to become temporarily inoperable due to an unprotected intent in the ContainerAgent application. This can result in the victim becoming...

Mitsubishi L26CPU-P PLC Detection

Binary data 751789.prm...

Siemens CPU 1505SP F and WinCC Runtime PLC Detection

Binary data 750323.prm...

Mitsubishi L06CPU-P PLC Detection

Binary data 751786.prm...

Siemens CPU 1505SP and WinCC Runtime PLC Detection

Binary data 750318.prm...

Emerson VE4032S2T2B8 Discrete Output Card Detection

Binary data 756765.prm...

Siemens CPU 1505SP F and WinCC Runtime PLC Detection

Binary data 750324.prm...

Mitsubishi L02CPU-P PLC Detection

Binary data 751782.prm...

Mitsubishi FX5-20PG-P Motion Module Detection

Binary data 754955.prm...

Privilege Escalation

The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. libvirt invokes the PolicyKit pkcheck utility to handle authorization. A race...

CVE-2019-7359

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7360

CVE-2019-7360 describes an exploitable use-after-free in the DXF-parsing logic of Autodesk AutoCAD 2018 family (Advance Steel, AutoCAD, Civil 3D, etc.). The root cause is a memory-management flaw in the LinetypeTableRecord handling: when the file indicates a zero-length Elements field, an allocat...

openSUSE Security Update : go1.11 (openSUSE-2019-1164)

This update for go1.11 to version 1.11.5 fixes the following issues : Security issue fixed : - CVE-2019-6486: Fixed a CPU Denial-of-Service vulnerability affecting crypto/ellpitic related to P-521 and P-384 bsc1123013 go29903. Other bug fixes and changes made : - Fix erroneous trailing backslash ...

openSUSE: Security Advisory for go1.11 (openSUSE-SU-2019:1164-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

XooDigital - (p) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: XooDigital - 'p' SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/digital-download-protection-script.html Demo Site: http://xooscripts.com/demos/xoodigital/ Version: Lastest Tested...

SUSE SLED15 / SLES15 Security Update : go1.11 (SUSE-SU-2019:0651-1)

This update for go1.11 to version 1.11.5 fixes the following issues : Security issue fixed : CVE-2019-6486: Fixed a CPU Denial-of-Service vulnerability affecting crypto/ellpitic related to P-521 and P-384 bsc1123013 go29903. Other bug fixes and changes made: Fix erroneous trailing backslash in...

Xiaomi perseus-p-oss MIX 3 integer overflow vulnerability

Xiaomi perseus-p-oss MIX 3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. Xiaomi perseus-p-oss MIX 3 An integer overflow vulnerability exists in the sdeevtlogfilterwrite method of the drivers/gpu/drm/msm/sdedbg.c file in the Xiaomi perseus-p-oss MIX 3 on 2018-11-26 and earlier...

CVE-2018-20787

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbgwrite in drivers/input/touchscreen/ft5x46/ft5x46ts.c. This is exploitable for a device crash v...

The vulnerability of the iputils utility in the Astra Linux operating system, which allows a hacker to circumvent established access control rules

The vulnerability of the iputils utility in the Astra Linux operating system is related to the absence of a prohibition for using the -p option. Exploiting this vulnerability allows a remote attacker to circumvent established access control rules by sending data over the network within ICMP packe...