1185 matches found
Glory Global RBW-100 Code Issue Vulnerability
The Glory Global RBW-100 is a bill collection device from Glory Global USA. A code issue vulnerability exists in the Glory Global RBW-100. An attacker could exploit the vulnerability to upload submitted data and execute code under their control on the file system...
Glory Global RBW-100 Trust Management Issues Vulnerability
The Glory Global RBW-100 is a bill collection device from Glory Global USA. The Glory Global RBW-100 suffers from a trust management issue vulnerability that can be exploited by an attacker to gain administrative privileges to the Front Circle Controller web interface...
SUSE SLED12 / SLES12 Security Update : mariadb-100 (SUSE-SU-2019:2118-1)
This update for mariadb-100 to version 10.0.38 fixes the following issues : CVE-2019-2537: Fixed a denial of service vulnerability which can lead to MySQL compromise bsc1136037. CVE-2019-2529: Fixed a denial of service vulnerability by an privileged attacker via a protocol compromise bsc1136037...
[SECURITY] Fedora 29 Update: kernel-5.2.7-100.fc29
The kernel meta package...
Avaya Deskphone: Decade-Old Vulnerability Found in Phone's Firmware
ARCHIVED STORY Avaya Deskphone: Decade-Old Vulnerability Found in Phone’s Firmware By Philippe Laulheret · August 08, 2019 Avaya is the second largest VOIP solution provider source with an install base covering 90% of the Fortune 100 companies source, with products targeting a wide spectrum of...
CVE-2016-10830
cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magicrevision SEC-100...
Crestron DGE-100 Continuous Name Change Denial of Service
Binary data 720268.prm...
Slack Initiates Mass Password Reset
Popular workspace collaboration platform Slack is in the middle of asking tens of thousands of users to reset their passwords after a security breach. The move is actually in response to new information that has come to light regarding a 2015 compromise, when hackers infiltrated Slack’s networks ...
CVE-2019-13373
Summary (CVE-2019-13373) : A vulnerability in D-Link Central WiFi Manager CWM-100 (versions before v1.03R0100_BETA6) where input is not validated, allowing arbitrary SQL commands via the /web/Public/Conn.php?dbSQL parameter. This can lead to database compromise, including retrieval of usernames/p...
CVE-2019-13372
D-Link Central WiFi Manager CWM(100) is affected by a remote code execution vulnerability in /web/Lib/Action/IndexAction.class.php. Before v1.03R0100_BETA6, a crafted cookie can trigger eval injection via the cookie’s username field, and an empty password bypasses authentication, enabling unauthe...
Leaky Amazon S3 Buckets Expose Data of Netflix, TD Bank
Three publicly-accessible cloud storage buckets from data management company Attunity leaked more than a terabyte of data from its top Fortune 100 customers – including internal business documents, system passwords, sensitive employee information. Israel-based Attunity, which was acquired by Qlik...
Friday Squid Blogging: Hundred-Million-Year-Old Squid Relative Found in Amber
This is a really interesting find. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Race condition
In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition...
CVE-2019-10977
CVE-2019-10977 affects Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 (serial 20121 and prior). The vulnerability arises when an attacker can send crafted TCP packets to the FTP service, which can force the device into an error mode and cause a denial-of-service condition. The CV...
Mitsubishi Electric MELSEC-Q Series PLCs Remote Denial of Service Vulnerability
Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 is an Ethernet module from Mitsubishi Electric Japan. A remote denial of service vulnerability exists in Mitsubishi Electric MELSEC-Q Series PLCs, which can be exploited by an attacker to cause a denial of service...
CVE-2019-12240
creationtimestamp| type| source ---|---|--- 2019-05-20 20:51:04+00:00| seen| https://t.me/cvemitreorg/100...
[SECURITY] Fedora 28 Update: kernel-5.0.16-100.fc28
The kernel meta package...
Siemens XC206 Switch Detection
Binary data 762271.prm...