PT-2019-20009

Name of the Vulnerable Software and Affected Versions nwmatcher versions prior to 1.4.4 Description A Regular Expression vulnerability was found. The issue involves repeated instances of the s pattern. Recommendations For versions prior to 1.4.4, update to version 1.4.4 or later to resolve the...

PT-2019-10960

Name of the Vulnerable Software and Affected Versions: Ubiquiti UniFi versions affected versions not specified Description: The issue allows remote attackers to bypass intended restrictions on "free time" Wi-Fi usage. This is achieved by sending a "/guest/s/default/" request to obtain a cookie, a...

Fedora Update for nss FEDORA-2019-e2f5e10754

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Race condition

Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service DoS...

Security feature bypass

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the...

CVE-2019-5285

CVE-2019-5285 affects Huawei S Series switches. A DoS exists where an unauthenticated remote attacker can send crafted packets, due to insufficient verification, potentially causing device reboot and denial of service. The issue is documented in Huawei’s advisory (HWPSIRT-2019-03109/SA-20190522-0...

s-alghomiz.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-847262 Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting s-alghomiz.com website a...

CVE-2019-5285: Improper Input Validation

Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service DoS...

Command Execution Vulnerability in the mi***.php File of S-CMS Enterprise Website Builder System

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website builder system mi.php file there is a command execution vulnerability, an attacker can use the vulnerabilit...

Ubuntu: Security Advisory (USN-3994-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 30 Update: nss-3.44.0-2.fc30

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Security Advisory - DoS Vulnerability in Huawei S Series Switch Products

Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service DoS...

PT-2019-2591

Name of the Vulnerable Software and Affected Versions Huawei S series switches affected versions not specified Description The issue is related to insufficient verification of input packets, allowing an unauthenticated remote attacker to send crafted packets and exploit the vulnerability...

WordPress Virim Deserialization Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Virim plugin is used in one of the website social activity analysis plugin. Virim plugin 0.4 for WordPress allows unsafe deserializatio...

Encrypt PDF 2.3 - Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: Encrypt PDF v2.3 - Denial of Service PoC Author: Alejandra Sánchez Vendor Homepage: http://www.verypdf.com Software: http://www.verypdf.com/encryptpdf/encryptpdf.exe Version: 2.3 Tested on: Windows 10 Proof of Concept: 1.- Run the python script "EncryptPDF.py", ...

PT-2019-12711

Name of the Vulnerable Software and Affected Versions Virim plugin version 0.4 Description The issue allows for Insecure Deserialization via s values, t values, or c values in the graph.php file. Recommendations For Virim plugin version 0.4, consider disabling the deserialization functionality in...

Weak Encryption

Mozilla Thunderbird is vulnerable to weak encryption attacks. This is because dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag could leak plaintext when included in a HTML reply/forward which may leads to disclosure of sensitive information...

Weak Encryption

Mozilla Thunderbird is vulnerable to weak encryption vulnerability. This exists in the Decrypted S/MIME parts. An attacker could leak plaintext by submitting an embedded form when included in a HTML reply/forward which may leads to disclosure of sensitive information...

Roundcube Webmail < 1.3.10 Information Disclosure Vulnerability

Roundcube Webmail is prone to an information disclosure vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1480)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. ...