CVE-2020-1872

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201C01E75R1P12T8, earlier than 9.1.0.252C185E2R1P9T8, earlier than 9.1.0.252C432E4R1P9T8, and earlier than 9.1.0.255C576E6R1P8T8 have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance...

CVE-2020-8825

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

Exploit for Cross-site Scripting in Vanillaforums Vanilla

CVE-2020-8825 Publish: CVE-2020-8825https:...

PT-2020-20308

Name of the Vulnerable Software and Affected Versions Vanilla version 2.6.3 Description The issue allows for stored XSS in the index.php?p=/dashboard/settings/branding endpoint. Recommendations For version 2.6.3, update to a newer version that contains a fix for this issue...

CVE-2011-1009

Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...

CVE-2011-1009: Improper Neutralization of Input During Web Page Generation

Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...

PT-2020-7089

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions 2.0.17.1 through 2.0.17.5 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the /vanilla/index.php endpoint via the p parameter. Recommendations For versions 2.0.17.1 through...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2017-1225)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

A week in security (January 13 – 19)

Last week on Malwarebytes Labs, we taught you how to prevent a rootkit attack, explained what data enrichment means, informed you about new rules on deepfakes in the US, and demonstrated how backdoors in elastic servers expose private data. Other cybersecurity news An online group of cybersecurit...

PYSEC-2020-83

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

CVE-2020-5312

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

Buffer overflow

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

CVE-2020-5312

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

Pillow PCX P-Mode Buffer Overflow Vulnerability

Pillow is a Python based image processing library. A buffer overflow vulnerability exists in the libImaging/PcxDecode.c file in versions of Pillow prior to 6.2.2, which stems from the program failing to properly check boundaries. A remote attacker can exploit this vulnerability to execute arbitra...

CVE-2020-5312: Buffer Copy without Checking Size of Input

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

PT-2020-5163 · Pillow +3 · Pillow +3

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 6.2.2 Description: The issue is related to a buffer overflow in the PCX P mode of the Pillow library when encoding images. This could allow a remote attacker to cause a denial of service. Recommendations: For versions...

Calling Local Windows RPC Servers from .NET

Posted by James Forshaw, Project Zero As much as I enjoy finding security vulnerabilities in Windows, in many ways I prefer the challenge of writing the tools to make it easier for me and others to do the hunting. This blog post gives an overview of using some recent tooling I’ve released as part...

CVE-2019-5264

There is an information disclosure vulnerability in certain Huawei smartphones Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9. The software does not properly handle certain information of applications locked by applock in a rare conditio...

CVE-2019-5264

There is an information disclosure vulnerability in certain Huawei smartphones Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9. The software does not properly handle certain information of applications locked by applock in a rare conditio...

PT-2019-17543

Name of the Vulnerable Software and Affected Versions Huawei Mate 10 Huawei Mate 10 Pro Huawei Honor V10 Huawei Changxiang 7S Huawei P-smart Huawei Changxiang 8 Plus Huawei Y9 2018 Huawei Honor 9 Lite Huawei Honor 9i Huawei Mate 9 Description The issue is related to an information disclosure...