6008 matches found
fuelCMS 1.4.1 Remote Code Execution
Exploit Title: fuelCMS 1.4.1 - Remote Code Execution Date: 2019-07-19 Exploit Author: 0xd0ff9 Vendor Homepage: https://www.getfuelcms.com/ Software Link: https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.4.1 Version: = 0 and n 1: start = haystack.findneedle, start+1 n -= 1 return start...
Solaris 10 (x86) : 125732-15
SunOS 5.10x86: XML and XSLT libraries patch. Date this patch was last updated by Sun : Jul/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid126727; scriptversion"1.3";...
Solaris 10 (sparc) : 136882-10
SunOS 5.10: ImageMagick patch. Date this patch was last updated by Sun : Jul/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid126718; scriptversion"1.2"; scriptcvsdate"Date:...
Solaris 10 (x86) : 136883-10
SunOS 5.10x86: ImageMagick patch. Date this patch was last updated by Sun : Jul/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid126728; scriptversion"1.2"; scriptcvsdate"Date:...
U.S. Coast Guard Releases Cybersecurity Measures for Commercial Vessels
The U.S. Coast Guard has released a Safety Alert with recommended cybersecurity best practices for commercial vessels. With a dynamic cybersecurity threat landscape and growing reliance on technology to support vessels, the maritime community can help strengthen their defenses by implementing the...
PT-2019-13298 · Ignited · Ignited Cms
Name of the Vulnerable Software and Affected Versions: Ignited CMS versions prior to 2017-02-19 Description: The issue allows for Cross-Site Request Forgery CSRF attacks, enabling an attacker to add an administrator account. This is related to the /index.php/admin/permissions endpoint...
CVE-2017-18346
SQL injection vulnerability in /wbg/core/includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbglogin parameter...
ABB IDAL HTTP Server Uncontrolled Format String
XL-19-012 - ABB IDAL HTTP Server Uncontrolled Format String Vulnerability ======================================================================== Identifiers ----------- XL-19-012 CVE-2019-7228 ABBVU-IAMF-1902007 CVSS Score ---------- 8.8 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected vendor...
DEBIAN-CVE-2019-10072
The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5.0 to 8.5.40 . By not sending WINDOWUPDATE messages for the connection window stream 0 clients were able to cause server-side threads to...
Mozilla Firefox Security Advisories (MFSA2019-19, MFSA2019-20) - Windows
Mozilla Firefox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Mozilla Firefox < 67.0.4
The version of Firefox installed on the remote Windows host is prior to 67.0.4. It is, therefore, affected by a vulnerability as referenced in the mfsa2019-19 advisory. - Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in th...
Mozilla Firefox ESR < 60.7.2
The version of Firefox ESR installed on the remote Windows host is prior to 60.7.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2019-19 advisory. - Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result i...
KLA11504 Incorrect parameters parsing vulnerability in Mozilla Firefox
Vulnerability, related to insufficient vetting of parameters passed with the Prompt:Open IPC message was found in Mozilla Firefox. Malicious users can exploit this vulnerability via specially designed website to bypass security restrictions. Original advisories - Related products Mozilla-Firefox...
CVE-2017-1107
creationtimestamp| type| source ---|---|--- 2019-06-19 18:32:15+00:00| seen| https://t.me/cibsecurity/5024...
CVE-2017-8332
creationtimestamp| type| source ---|---|--- 2019-06-19 00:31:40+00:00| seen| https://t.me/cibsecurity/4998...
CVE-2017-8333
creationtimestamp| type| source ---|---|--- 2019-06-19 00:31:39+00:00| seen| https://t.me/cibsecurity/4997...
CVE-2017-8334
creationtimestamp| type| source ---|---|--- 2019-06-19 00:31:38+00:00| seen| https://t.me/cibsecurity/4996...
Siemens SIMATIC PCS 7 <= V9.0 and TIA Portal <= 15 SQL Injection RCE (ICSA-19-134-08)
Binary data 720263.prm...