Design/Logic Flaw

An issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. Under specialized conditions, an invited group member may continue to have access to a project even after t...

The vulnerability of the conference communication component of the Mitel ST 14.2 telecommunications system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the conference communication component in Mitel ST 14.2 telecommunications systems is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Slackware Linux 14.2 / current ntfs-3g Multiple Vulnerabilities (SSA:2021-243-01)

The version of ntfs-3g installed on the remote host is prior to 2021.8.22. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2021-243-01 advisory. - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in...

Slackware 14.2 : Slackware 14.2 kernel (SSA:2021-202-01)

New kernel packages are available for Slackware 14.2 to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2021-202-01. The text itself is copyright C Slackware Linux, In...

Sticky Notes Widget 3.0.6 Denial Of Service

Exploit Title: Sticky Notes Widget Version 3.0.6 - Denial of Service PoC Date: 06-07-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/sticky-notes-widget/id1499269608 Version: 3.0.6 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long lis...

memono Notepad 4.2 Denial Of Service

Exploit Title: memono Notepad Version 4.2 - Denial of Service PoC Date: 06-09-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/es/app/memono-bloc-de-notas/id906470619 Version: 4.2 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long list of...

memono Notepad Version 4.2 - Denial of Service (PoC)

Exploit Title: memono Notepad Version 4.2 - Denial of Service PoC Date: 06-09-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/es/app/memono-bloc-de-notas/id906470619 Version: 4.2 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long list of...

[slackware-security] polkit

New polkit packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/polkit-0.113-i586-3slack14.2.txz: Rebuilt. This update includes a mitigation for local privilege escalation using...

Sticky Notes & Color Widgets 1.4.2 - Denial of Service Exploit

Exploit Title: Sticky Notes & Color Widgets 1.4.2 - Denial of Service PoC Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/sticky-notes-color-widgets/id1476063010 Version: 1.4.2 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long list of...

Sticky Notes & Color Widgets 1.4.2 - Denial of Service (PoC)

Exploit Title: Sticky Notes & Color Widgets 1.4.2 - Denial of Service PoC Date: 06-04-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/sticky-notes-color-widgets/id1476063010 Version: 1.4.2 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a...

My Notes Safe 5.3 Denial Of Service

Exploit Title: My Notes Safe 5.3 - Denial of Service PoC Date: 06-04-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/my-notes-safe/id689971781 Version: 5.3 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long list of characters is being...

Color Notes 1.4 Denial Of Service

Exploit Title: Color Notes 1.4 - Denial of Service PoC Date: 06-04-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/gt/app/color-notes/id830515136 Version: 1.4 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long list of characters is being used...

Color Notes 1.4 - Denial of Service (PoC)

Exploit Title: Color Notes 1.4 - Denial of Service PoC Date: 06-04-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/gt/app/color-notes/id830515136 Version: 1.4 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long list of characters is being used...

Macaron Notes great notebook 5.5 - Denial of Service (PoC)

Exploit Title: Macaron Notes great notebook 5.5 - Denial of Service PoC Date: 06-04-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/macaron-notes-great-notebook/id1079862221 Version: 5.5 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a lo...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple Inc. in the United States. tvOS suffers from a buffer error vulnerability that stems from a boundary condition in ImageIO. A remote attacker exploiting this vulnerability could create a specially crafted file, trick a victim into opening...

[slackware-security] libX11

New libX11 packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libX11-1.7.1-i586-1slack14.2.txz: Upgraded. This update fixes missing request length checks in libX11 that can lead to t...

Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2021-118-01)

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2021-118-01. The text itself is copyright C Slackware Linux,...

Slackware 14.2 / current : seamonkey (SSA:2021-110-01)

New seamonkey packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2021-110-01. The text itself is copyright C Slackware Linux, Inc...

CVE-2020-27908

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted audio file ma...

CVE-2020-27899

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS 14.2. A local attacker may be able to elevate their privileges...