openSUSE: Security Advisory for go1.11 (openSUSE-SU-2019:1164-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WS-2019-0532

radare2 in versions 1.1.0 to 3.4.0 is vulnerable to heap-buffer-overflow in dexparsedebugitem, related to libr/bin/p/bindex.c...

XooDigital - (p) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: XooDigital - 'p' SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/digital-download-protection-script.html Demo Site: http://xooscripts.com/demos/xoodigital/ Version: Lastest Tested...

SUSE SLED15 / SLES15 Security Update : go1.11 (SUSE-SU-2019:0651-1)

This update for go1.11 to version 1.11.5 fixes the following issues : Security issue fixed : CVE-2019-6486: Fixed a CPU Denial-of-Service vulnerability affecting crypto/ellpitic related to P-521 and P-384 bsc1123013 go29903. Other bug fixes and changes made: Fix erroneous trailing backslash in...

WS-2019-0536

In radare2 in version 2.1.0 to 3.4.1 is vulnerable to Heap-buffer-overflow in rutf8strlen related to libr/bin/p/bindex.c...

Xiaomi perseus-p-oss MIX 3 integer overflow vulnerability

Xiaomi perseus-p-oss MIX 3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. Xiaomi perseus-p-oss MIX 3 An integer overflow vulnerability exists in the sdeevtlogfilterwrite method of the drivers/gpu/drm/msm/sdedbg.c file in the Xiaomi perseus-p-oss MIX 3 on 2018-11-26 and earlier...

CVE-2018-20787

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbgwrite in drivers/input/touchscreen/ft5x46/ft5x46ts.c. This is exploitable for a device crash v...

PT-2019-19365

Name of the Vulnerable Software and Affected Versions msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 Description The issue is caused by an integer overflow due to missing checks of the count argument in the sde evtlog filter write function in...

CVE-2019-9111: Integer Overflow or Wraparound

The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in sdeevtlogfilterwrite in drivers/gpu/drm/msm/sdedbg.c. This is exploitable for a device crash via a syscall by...

CVE-2018-20787: Integer Overflow or Wraparound

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbgwrite in drivers/input/touchscreen/ft5x46/ft5x46ts.c. This is exploitable for a device crash v...

PT-2019-18980

Name of the Vulnerable Software and Affected Versions BEESCMS version 4.0 Description The issue allows for the addition of arbitrary VIP accounts due to a CSRF vulnerability. This can be exploited via the "admin/admin member.php?action=add&nav=add web user&admin p nav=user" URI, which is an API...

CVE-2019-7738

C.P.Sub before 5.3 allows CSRF via a manage.php?p=articledel&id= URI...

CVE-2019-7738: Cross-Site Request Forgery (CSRF)

C.P.Sub before 5.3 allows CSRF via a manage.php?p=articledel&id= URI...

PT-2019-18732

Name of the Vulnerable Software and Affected Versions C.P.Sub versions prior to 5.3 Description The issue allows for CSRF attacks. This can be achieved via a "manage.php?p=article del&id=" URI. Recommendations For versions prior to 5.3, update to version 5.3 or later to resolve the issue...

The vulnerability of the iputils utility in the Astra Linux operating system, which allows a hacker to circumvent established access control rules

The vulnerability of the iputils utility in the Astra Linux operating system is related to the absence of a prohibition for using the -p option. Exploiting this vulnerability allows a remote attacker to circumvent established access control rules by sending data over the network within ICMP packe...

Debian: Security Advisory (DSA-4379-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

crypto/elliptic in github.com/golang/go is vulnerable to denial of service DoS. The attack exists because it introduces a long busy loop in subtraction term for the implementation of P-521 and P-384 elliptic curve cryptography algorithms which allows malicious input through TLS handshakes, X.509...

UBUNTU-CVE-2019-6486

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service CPU consumption or possibly conduct ECDH private key recovery attacks...

CVE-2019-6486

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service CPU consumption or possibly conduct ECDH private key recovery attacks...

CVE-2019-6486: Allocation of Resources Without Limits or Throttling

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service CPU consumption or possibly conduct ECDH private key recovery attacks...