12104 matches found
CVE-2015-5686
Puppet Enterprise Console 3.x is affected by CSRF and clickjacking vulnerabilities leading to possible session hijacking or redirection of user input to untrusted sites. This CVE (CVE-2015-5686) is corroborated by multiple sources in connected documents (e.g., CNVD-2020-17190 and NVD entries) des...
Virtuozzo Hybrid Server 7.5 Hotfix 3 (7.5.0-610)
The Hotfix 3 for Virtuozzo Hybrid Server 7.5 provides stability and usability bug fixes. Vulnerability id: PSBM-124766 VM's filesystem could remain frozen and non-working after backup. Vulnerability id: PSBM-125260 EZ templates are now installed and their post-install scripts are now run in the...
Slic3r libslic3r AMF File AMFParserContext::endElement() out-of-bounds read vulnerability
Summary An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this...
[SECURITY] Fedora 30 Update: glib2-2.60.7-3.fc30
GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system...
pokerchipswholesale.com Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3637 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting pokerchipswholesale.com website and its users. Following...
Fedora: Security Advisory for webkit2gtk3 (FEDORA-2020-3269917c2f)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-6968
Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files...
Code injection
Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files...
CVE-2020-6968
CVE-2020-6968 affects Honeywell INNCOM INNControl 3 (versions 3.21 and prior). Root cause: Improper Privilege Management (CWE-269) allowing workstation users to escalate privileges by modifying local configuration files. Exploitation is local; no remote access described. NVD CVSSv3 base 7.8 (AV:L...
Honeywell NOTI-FIRE-NET Web Server (NWS-3)
1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Honeywell Equipment: NOTI-FIRE-NET Web Server NWS-3 Vulnerabilities: Authentication Bypass by Capture-replay, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities...
lullar-com-3.appspot.com Cross Site Scripting vulnerability
Security Researcher Broly157 Helped patch 1569 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting lullar-com-3.appspot.com website and its users. Following...
Honeywell INNCOM INNControl 3
1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Low skill level to exploit Vendor: Honeywell Equipment: INNCOM INNControl 3 Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate user privileges within the...
Apple Security Update: watchOS 5.3.5
Apple recommends to install security update watchOS 5.3.5 on devices Apple Watch Series 1, Apple Watch Series 2, Apple Watch Series 3, and Apple Watch Series 4 when paired to an iPhone with iOS 12 installed...
Apple Security Update: watchOS 5.3.5
Apple recommends to install security update watchOS 5.3.5 on devices Apple Watch Series 1, Apple Watch Series 2, Apple Watch Series 3, and Apple Watch Series 4 when paired to an iPhone with iOS 12 installed...
Exploit for Incorrect Calculation in Google Android
cve-2020-0022 poc for cve-2020-0022 usage gcc poc.c -l...
Product update: Virtuozzo 7.0 Update 12 Hotfix 3 (7.0.12-361)
The Hotfix 3 for Virtuozzo 7.0 Update 12 provides stability and usability bug fixes. Vulnerability id: PSBM-100126 Ploop is corrupted after node reboot repair image outgrows device size. Vulnerability id: PSBM-101150 vzstat does not show actual IO and IOPS load and limits. Vulnerability id:...
Intel Patches High-Severity Flaw in Security Engine
Intel is warning of a high-severity flaw in the firmware of its converged security and management engine CSME, which if exploited could allow privilege escalation, denial of service and information disclosure. CSME powers Intel’s Active Management System hardware and firmware technology, used for...
Google Invisible RECAPTCHA 3 Spoof Bypass
Exploit Title: Google Invisible RECAPTCHA 3 - Spoof Bypass Date: 2020-02-07 Vendor Homepage: https://developers.google.com/recaptcha/docs/invisible Exploit Git Repo: https://github.com/matamorphosis/Browser-Exploits/tree/master/RECAPTCHABypass Exploit Author: Matamorphosis Tested on: Windows and...