5939 matches found
Easylogin Pro 1.3.0 - 'Encryptor.php' Unserialize Remote Code Execution
!/usr/bin/php -c -t: target server ip with or without port -c: connectback server ip and port Example: php ./e.php -t 172.16.175.136 -c 172.16.175.137:1337 ---------------------------------------------------- mrme@pluto:$ ./e.php -t 172.16.175.137 -c 172.16.175.136:1337 Easylogin Pro = v1.3.0...
CVE-2018-14888
inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject...
PT-2018-12778
Name of the Vulnerable Software and Affected Versions Eldenroot Thank You/Like plugin versions prior to 3.1.0 Description The issue allows for XSS attacks via a post or thread subject, potentially affecting the security of the MyBB platform. Recommendations For versions prior to 3.1.0, update to...
CVE-2018-14888: Improper Neutralization of Input During Web Page Generation
inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject...
CVE-2017-2670
It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS...
[SECURITY] Fedora 28 Update: rust-1.27.1-2.fc28
Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...
CVE-2018-1337
In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS layer has been established, if the connection has already been used and put back in a pool of connections, leading to leaking any informati...
CVE-2018-1337
In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS layer has been established, if the connection has already been used and put back in a pool of connections, leading to leaking any informati...
Integer overflow
The mintToken function of a smart contract implementation for Thread, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2018-13752
CVE-2018-13752 concerns a vulnerability in the mintToken function of a Thread Ethereum token smart contract. The root cause is an integer overflow in mintToken, which allows the contract owner to arbitrarily set the balance of any user. Documents consistently describe the impact as enabling balan...
CVE-2018-13752: Integer Overflow or Wraparound
The mintToken function of a smart contract implementation for Thread, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2018-1000617: Improper Input Validation
Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...
PT-2018-12149
Name of the Vulnerable Software and Affected Versions Thread affected versions not specified Description The issue concerns an integer overflow in the mintToken function of a smart contract implementation for Thread, an Ethereum token. This overflow allows the owner of the contract to set the...
PT-2018-9471
Name of the Vulnerable Software and Affected Versions Atlassian Floodlight Controller versions 1.2 and earlier Description The issue is related to a Denial of Service vulnerability in the Forwarding module, which can result in an improper type cast. This allows remote attackers to cause a Denial ...
Design/Logic Flaw
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipcdataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in...
glibc security update
2.12-1.212.0.1 - backport rh patch 1047983 from OL7, Orabug 25407655 2.12-1.212 - CVE-2017-15670: glob: Fix one-byte overflow with GLOBTILDE 1504810 - CVE-2017-15804: glob: Fix buffer overflow in GLOBTILDE unescaping 1504810 2.12-1.211 - Avoid large allocas in the dynamic linker 1452717 2.12-1.21...
glibc security and bug fix update
2.12-1.212.0.1 - backport rh patch 1047983 from OL7, Orabug 25407655 2.12-1.212 - CVE-2017-15670: glob: Fix one-byte overflow with GLOBTILDE 1504810 - CVE-2017-15804: glob: Fix buffer overflow in GLOBTILDE unescaping 1504810 2.12-1.211 - Avoid large allocas in the dynamic linker 1452717 2.12-1.21...
Algeria Shut Down the Internet to Prevent Students from Cheating on Exams
Algeria shut the Internet down nationwide to prevent high-school students from cheating on their exams. The solution in New South Wales, Australia was to ban smartphones. EDITED TO ADD 6/22: Slashdot thread...
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Security Proventia Network Active Bypass (CVE-2015-4000)
Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affect IBM Security Proventia Network Active Bypass Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the...