TemaTres 3.0 - Cross-Site Request Forgery (Add Admin)

TemaTres 3.0 - Cross-Site Request Forgery Add Admin Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source:...

CVE-2014-7143

Python Twisted 14.0 trustRoot is not respected in HTTP client...

Milesight IP security cameras authorization issue vulnerability

Milesight IP security cameras are IP camera products from China Pulse Digital Technology Milesight. A security vulnerability exists in Milesight IP security cameras version 2016-11-14 and earlier. An attacker can exploit the vulnerability to bypass authentication and access protected resources...

Milesight IP security cameras buffer overflow vulnerability

Milesight IP security cameras are IP camera products from China Pulse Digital Technology Milesight. Milesight IP security cameras A buffer overflow vulnerability exists in web applications in versions 2016-11-14 and earlier. The vulnerability originates when a web system or product performs an...

CVE-2016-2358

Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts...

CVE-2016-2357

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory...

CVE-2019-16966

An issue was discovered in Contactmanager 13.x before 13.0.45.3, 14.x before 14.0.5.12, and 15.x before 15.0.8.21 for FreePBX 14.0.10.3. In the Contactmanager class html\admin\modules\contactmanager\Contactmanager.class.php, an unsanitized group variable coming from the URL is reflected in HTML o...

Solaris 10 (x86) : 119758-44

SunOS 5.10x86: Samba patch. Date this patch was last updated by Sun : Oct/14/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid129873; scriptversion"1.4";...

Solaris 10 (sparc) : 125215-08

SunOS 5.10: wget patch. Date this patch was last updated by Sun : Oct/14/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid129871; scriptversion"1.3"; scriptcvsdate"Date:...

Solaris 10 (sparc) : 119757-44

SunOS 5.10: Samba patch. Date this patch was last updated by Sun : Oct/14/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid129869; scriptversion"1.4";...

14-18-fleurylavallee.e-monsite.com Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6844 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting 14-18-fleurylavallee.e-monsite.com website and its users...

October 2019 security updates are available!

We have released the October security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found in the Security Update Guide. As a reminder,...

DEBIAN-CVE-2019-16232

drivers/net/wireless/marvell/libertas/ifsdio.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference...

September 2019 Security Updates

We have released the September security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found in the Security Update Guide. As a reminder,...

CVE-2015-9308

creationtimestamp| type| source ---|---|--- 2019-08-14 20:34:01+00:00| seen| https://t.me/cibsecurity/6144...

CVE-2015-9312

creationtimestamp| type| source ---|---|--- 2019-08-14 18:28:27+00:00| seen| https://t.me/cibsecurity/6134...

CVE-2015-9313

creationtimestamp| type| source ---|---|--- 2019-08-14 18:28:26+00:00| seen| https://t.me/cibsecurity/6133...

CVE-2015-9316

creationtimestamp| type| source ---|---|--- 2019-08-14 18:28:23+00:00| seen| https://t.me/cibsecurity/6130...

CVE-2014-10375

creationtimestamp| type| source ---|---|--- 2019-08-14 12:48:37+00:00| seen| https://t.me/cibsecurity/6116...

Buffer overflow

A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...