CVE-2019-6805

SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...

CVE-2019-6805

CVE-2019-6805 is a SQL injection vulnerability in S-CMS v3.0, exploitable via the alipay/alipayapi.php O_id parameter. The issue allows partial to full disclosure/impact on confidentiality, integrity, and availability (per CVSS 2.0/3.0 vectors; base scores 7.5 and 9.8 respectively). The provided ...

CVE-2019-6805: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...

PT-2019-18363

Name of the Vulnerable Software and Affected Versions S-CMS version V3.0 Description A SQL Injection issue was discovered in the software. The issue is related to the O id parameter in the "alipay/alipayapi.php" endpoint. Recommendations For S-CMS version V3.0, avoid using the O id parameter in t...

[SECURITY] Fedora 28 Update: gnupg2-2.2.12-1.fc28

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to insufficient protection of the WEB-page structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Cisco Email Security Appliance Multiple DoS Vulnerabilities (cisco-sa-20190109-esa-dos / cisco-sa-20190109-esa-url-dos)

According to its self-reported version, the Cisco Email Security Appliance ESA is affected by the following vulnerabilities: - A denial of service DoS vulnerability exists in Secure/Multipurpose Internet Mail Extensions S/MIME Decryption and Verification and S/MIME Public Key Harvesting features...

PT-2019-18081

Name of the Vulnerable Software and Affected Versions EasyCMS version 1.5 Description An issue was discovered that allows for CSRF via the "index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent" URI. Recommendations For EasyCMS version 1.5, consider implementing proper...

Security fix for the ALT Linux 10 package php8.0 version Jan.

Jan. 15, 2019 Anton Farygin 7.2.14-alt1 - 7.2.14 fixes: CVE-2018-19935 - removed the .a archive from php7-mysqlnd package closes: 34521 - E2K: worked around the lack of gcc5's builtins in lcc-1.23 closes: 35856...

Cisco Email Security Appliance S/MIME Denial of Service Vulnerability

The Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system used in it. A security vulnerability exists in the Secure/Multipurpose Internet Mail Extensions S/MIME Decryption and Verification or S/MIME Public Key Harvesting...

S-nail 14.8.16 - Local Privilege Escalation

S-nail 14.8.16 - Local Privilege Escalation !/bin/sh Wrapper for @wapiflapi's s-nail-privget.c local root exploit for CVE-2017-5899 uses ld.so.preload technique --- Found privsep: /usr/lib/s-nail/s-nail-privsep . Compiling /var/tmp/.snail.so.c ... . Compiling /var/tmp/.sh.c ... . Compiling...

S-nail < 14.8.16 - Local Privilege Escalation

!/bin/sh Wrapper for @wapiflapi's s-nail-privget.c local root exploit for CVE-2017-5899 uses ld.so.preload technique --- Found privsep: /usr/lib/s-nail/s-nail-privsep . Compiling /var/tmp/.snail.so.c ... . Compiling /var/tmp/.sh.c ... . Compiling /var/tmp/.privget.c ... . Adding /var/tmp/.snail.s...

[SECURITY] Fedora 29 Update: gnupg2-2.2.12-1.fc29

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...

Design/Logic Flaw

A vulnerability in the Secure/Multipurpose Internet Mail Extensions S/MIME Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an affected device to corrupt...

CVE-2018-15453

A vulnerability in the Secure/Multipurpose Internet Mail Extensions S/MIME Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an affected device to corrupt...

CVE-2018-15453 Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability

A vulnerability in the Secure/Multipurpose Internet Mail Extensions S/MIME Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an affected device to corrupt...

CVE-2018-15453 Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability

A vulnerability in the Secure/Multipurpose Internet Mail Extensions S/MIME Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an affected device to corrupt...

CVE-2018-15453

Cisco AsyncOS for Cisco Email Security Appliance (ESA) contains a memory corruption DoS vulnerability (CVE-2018-15453) in S/MIME Decryption and Verification and S/MIME Public Key Harvesting. An unauthenticated remote attacker can send a malicious S/MIME-signed email to trigger memory corruption, ...

CVE-2018-15453: Improper Input Validation

A vulnerability in the Secure/Multipurpose Internet Mail Extensions S/MIME Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an affected device to corrupt...

Critical Flaw in Cisco's Email Security Appliance Enables 'Permanent DoS'

Cisco has patched two serious vulnerabilities – one critical and one high-severity – in its email security appliance tool. Both bugs ultimately lead to a denial of service DoS on impacted devices – and can be exploited by an attacker who simply sends an email. Overall, the company on Wednesday...