CVE-2019-10478

An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. An unrestricted file upload vulnerability in the Front Circle Controller glytoolcgi/settingfileupload.cgi allows attackers to upload supplied data. This can be used to place attacker controlled code on the filesystem...

CVE-2019-10479

An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. A hard-coded username and password were identified that allow a remote attacker to gain admin access to the Front Circle Controller web interface...

Slackware 14.2 / current : wget (SSA:2019-092-02)

New wget packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-092-02. The text itself is copyright C Slackware Linux, Inc...

CVE-2017-8023

creationtimestamp| type| source ---|---|--- 2019-04-02 00:27:17+00:00| seen| https://t.me/cibsecurity/3469...

Input Validation Vulnerability in Caret

Caret is a software package for plotting classification and regression models. An input validation vulnerability exists in versions of Caret prior to 2019-02-22 that originates from a networked system or product that does not properly validate incoming data. An attacker could exploit the...

CVE-2019-9927

Caret before 2019-02-22 allows Remote Code Execution...

GLSA-201903-02 : Zsh: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201903-02 Zsh: User-assisted execution of arbitrary code Two input validation errors have been discovered in how Zsh parses scripts: Parsing a malformed shebang line could cause Zsh to call a program listed in the second line...

CVE-2013-7466

creationtimestamp| type| source ---|---|--- 2019-03-08 02:36:14+00:00| seen| https://t.me/cibsecurity/2982...

Drupal CVE-2019-6340 Remote Code Execution EXP

Description This Metasploit module exploits a PHP unserialize vulnerability in Drupal RESTful Web Services by sending a crafted request to the /node REST endpoint. As per SA-CORE-2019-003, the initial remediation was to disable POST, PATCH, and PUT, but Ambionics discovered that GET was also...

Drupal RESTful Web Services unserialize() Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal RESTful Web Services unserialize RCE', 'Description' = %q This module exploits a PHP unserialize vulnerability in Drupal RESTful Web...

CVE-2018-12388

creationtimestamp| type| source ---|---|--- 2019-02-28 20:24:29+00:00| seen| https://t.me/cibsecurity/2799...

CVE-2018-12391

creationtimestamp| type| source ---|---|--- 2019-02-28 20:24:26+00:00| seen| https://t.me/cibsecurity/2796...

CVE-2018-12396

creationtimestamp| type| source ---|---|--- 2019-02-28 20:24:22+00:00| seen| https://t.me/cibsecurity/2792...

CVE-2018-12398

creationtimestamp| type| source ---|---|--- 2019-02-28 20:24:17+00:00| seen| https://t.me/cibsecurity/2790...

CVE-2018-12402

creationtimestamp| type| source ---|---|--- 2019-02-28 20:24:14+00:00| seen| https://t.me/cibsecurity/2786...

CVE-2018-11932

creationtimestamp| type| source ---|---|--- 2019-02-26 00:58:16+00:00| seen| https://t.me/cibsecurity/2719...

CVE-2018-11935

creationtimestamp| type| source ---|---|--- 2019-02-26 00:58:15+00:00| seen| https://t.me/cibsecurity/2718...

CVE-2013-7469

creationtimestamp| type| source ---|---|--- 2019-02-21 09:14:18+00:00| seen| https://t.me/cibsecurity/2650...

CVE-2018-15380

creationtimestamp| type| source ---|---|--- 2019-02-21 03:14:08+00:00| seen| https://t.me/cibsecurity/2649...

Adobe Acrobat and Reader Heap Overflow - VER0 (APSB18-02: CVE-2018-4904)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...