CVE-2021-34894

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34894

CVE-2021-34894 affects Bentley View 10.15.0.75, with a flaw in 3DS file parsing where the code fails to validate an object before operating on it. The vulnerability can enable remote code execution in the context of the current process when a user opens a crafted 3DS file (use-after-free-like beh...

CVE-2021-34894

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Exploit for Path Traversal in Mikrotik Routeros

This is a proof of concept PoC exploit for the critical WinBox vulnerability CVE-2018-14847 that allows for arbitrary file read of plain text passwords. The vulnerability has been fixed, but the project is no longer supported or updated. The exploit is written in Python and uses the socket librar...

Yandex Pummeled by Potent Meris DDoS Botnet

Technical details tied to a record-breaking distributed-denial-of-service DDoS attack against Russian internet behemoth Yandex are surfacing as the digital dust settles. A massive botnet, dubbed Mēris, is believed responsible, flooding Yandex with millions of HTTP requests for webpages at the sam...

SUSE: Security Advisory (SUSE-SU-2019:2866-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2668-1 : samba security update

Several vulnerabilities were discovered in Samba, SMB/CIFS file, print, and login server for Unix CVE-2019-10218 A flaw was found in the samba client, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of t...

[SECURITY] [DLA 2668-1] samba security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2668-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 29, 2021 https://wiki.debian.org/LTS -...

SUSE: Security Advisory (SUSE-SU-2020:2673-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-14847

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Query. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2020-14847

CVE-2020-14847 affects Oracle PeopleSoft (PeopleTools Query) with affected 8.56–8.58. A high-privileged attacker, over network access via HTTP, can read a subset of PeopleTools data due to the Query component vulnerability. This is linked to Oracle PeopleSoft/PeopleTools software and was addresse...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-2110)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Type confusion

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the EXTFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14847 August 2019...

CVE-2019-20583

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the EXTFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14847 August 2019...

CVE-2019-20583

CVE-2019-20583 affects Samsung mobile devices running O(8.x) and P(9.0) with TEEGRIS. The issue is a type confusion in the EXT_FR Trustlet that can lead to arbitrary code execution. Exploitation details are not provided in the documents. The vulnerability is documented across multiple sources con...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-2303)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-1040)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-2547)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.5.0 : samba (EulerOS-SA-2020-1040)

According to the versions of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords to restrict...