7952 matches found
CVE-2020-16150
A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...
CVE-2020-16150
A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...
CVE-2020-16150
CVE-2020-16150 describes a Lucky 13 timing side-channel in mbedtls_ssl_decrypt_buf (library/ssl_msg.c) of Trusted Firmware Mbed TLS up to version 2.23.0. The side-channel arises from padding-length dependent timing in CBC mode, enabling an attacker to recover secret key information. The vulnerabi...
JITSploitation III: Subverting Control Flow
Posted by Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed i...
13.lv Cross Site Scripting vulnerability OBB-1288083
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-10518
creationtimestamp| type| source ---|---|--- 2020-08-28 02:55:13+00:00| seen| https://t.me/cibsecurity/14361 2020-12-29 00:21:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2053...
Oracle Linux 8 : nodejs:10 (ELSA-2020-0579)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0579 advisory. - Rebase to 10.19.0 to fix CVE-2019-15604 to CVE-2019-15606 - Rebase to 10.16.3 to fix CVE-2019-9511 to CVE-2019-9518 Tenable has extracted the precedi...
CVE-2020-0261
creationtimestamp| type| source ---|---|--- 2020-08-13 20:55:11+00:00| seen| https://t.me/cibsecurity/14123...
CVE-2019-4582
creationtimestamp| type| source ---|---|--- 2020-08-13 16:55:11+00:00| seen| https://t.me/cibsecurity/14109...
website-review.ro Open Redirect vulnerability OBB-1259032
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mailservice.karelia.com Cross Site Scripting vulnerability OBB-1258750
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2019-14620
creationtimestamp| type| source ---|---|--- 2020-08-13 07:55:32+00:00| seen| https://t.me/cibsecurity/14100...
CVE-2020-0512
creationtimestamp| type| source ---|---|--- 2020-08-13 07:55:29+00:00| seen| https://t.me/cibsecurity/14097...
CVE-2020-0553
creationtimestamp| type| source ---|---|--- 2020-08-13 07:55:27+00:00| seen| https://t.me/cibsecurity/14095...
CVE-2020-0554
creationtimestamp| type| source ---|---|--- 2020-08-13 07:55:26+00:00| seen| https://t.me/cibsecurity/14094...
CVE-2020-0555
creationtimestamp| type| source ---|---|--- 2020-08-13 07:55:25+00:00| seen| https://t.me/cibsecurity/14093...
thetradefinder.co.uk Cross Site Scripting vulnerability OBB-1258374
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
matomo.stuttgart.de Improper Access Control vulnerability OBB-1257983
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
debug.movetv.com Improper Access Control vulnerability OBB-1257959
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
portermatthewsvicpark.com.au Cross Site Scripting vulnerability OBB-1252872
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...