PT-2021-8282

Name of the Vulnerable Software and Affected Versions NumPy versions prior to 1.19 Description The issue is related to a buffer overflow in the array from pyobj function of fortranobject.c in NumPy, which can be exploited to conduct Denial of Service attacks by carefully constructing an array wit...

TestLink 1.19 - Arbitrary File Download (Unauthenticated) Vulnerability

Exploit Title: TestLink 1.19 - Arbitrary File Download Unauthenticated Google Dork: inurl:/testlink/ Exploit Author: Gonzalo Villegas Cl34r Exploit Author Homepage: https://nch.ninja Vendor Homepage: https://testlink.org/ Version:1.16 = 1.19 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N You...

ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.

...

WordPress underConstruction plugin <= 1.18 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ram Gall WordFence in WordPress underConstruction plugin versions = 1.18. Solution Update the WordPress underConstruction plugin to the latest available version at least 1.19...

CVE-2021-36222

ecverify in kdc/kdcpreauthec.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation...

DEBIAN-CVE-2019-15608

The package integrity validation in yarn 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. This may lead to a cache pollution attack...

CVE-2012-4381

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...

Moxa AWK-3121 Cross-Site Scripting Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A cross-site scripting vulnerability exists in the 'iwboarddeviceName' parameter in the Moxa AWK-3121 version 1.19, which can be exploited by an attacker to execute client-side code...

CVE-2018-10700

An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows an attacker to execute XSS by injecting an XSS payload. The POST parameter "iwboarddeviceName" is susceptible to this...

Updated wget packages fix security vulnerability

Since version 1.19 Wget stores the URL and in certain cases the 'Referer' URL within extended attributes xattrs of the file system - by default. This includes username + password and other credentials or private data if those have been used within the URLs. Anyone with read access to those files...

CloudBees Jenkins AWS CodeDeploy Plugin Information Disclosure Vulnerability

CloudBees Jenkins is a set of Java-based continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . AWS CodeDeploy Plugin is used in one of the deployment components . An information...

Apache Tika < 1.19 Junrar DoS Vulnerability

Apache Tika is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tika";...

CVE-2012-4378

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

Multiple I-O DATA Network Camera Products Cross-Site Request Forgery Vulnerability

I-O DATA TS-WPTCAM and others are network cameras from I-O DATA DEVICE, Japan. A cross-site request forgery vulnerability exists in various I-O DATA Network Camera products using firmware version 1.19 and earlier. A remote attacker could exploit this vulnerability to perform unauthorized operatio...

TM RG4332 2.7.0 Arbitrary File Disclosure

Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read Date: 27/01/2017 Exploit Author: Saeid Atabaki Version: RG4332V2.7.0 Tested on: RG4332 with minihttp 1.19 = 1 ============================================================= GET...

TM RG4332 Wireless Router - Arbitrary File Disclosure Vulnerability

Exploit for hardware platform in category web applications Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read Date: 27/01/2017 Exploit Author: Saeid Atabaki Version: RG4332V2.7.0 Tested on: RG4332 with minihttp 1.19 = 1...

TM RG4332 Wireless Router - Arbitrary File Disclosure

Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read Date: 27/01/2017 Exploit Author: Saeid Atabaki Version: RG4332V2.7.0 Tested on: RG4332 with minihttp 1.19 = 1 ============================================================= GET...

TM RG4332 Wireless Router - Arbitrary File Disclosure

TM RG4332 Wireless Router - Arbitrary File Disclosure Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read Date: 27/01/2017 Exploit Author: Saeid Atabaki Version: RG4332V2.7.0 Tested on: RG4332 with minihttp 1.19 = 1 =============================================================...

VeraCrypt Audit Reveals Critical Security Flaws — Update Now

After TrueCrypt mysteriously discontinued its service, VeraCrypt became the most popular open source disk encryption software used by activists, journalists, as well as privacy conscious people. First of all, there is no such thing as a perfect, bug-free software. Even the most rigorously tested...

Cisco Wireless LAN Controller 802.11i Management Frame DoS

Cisco Wireless LAN Controller contains a vulnerability that could allow an unauthenticated, adjacent attacker to cause a denial of service condition. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...