Intel Graphics Driver Denial of Service Vulnerability

Intel Graphics Driver is an integrated graphics driver developed by Intel Corporation.User Mode Driver is one of the user mode drivers. A security vulnerability exists in the User Mode Driver in Intel Graphics Driver versions 15.40.x.4 and 21.20.x.x. The vulnerability stems from the program faili...

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application For iOS

This is a Swift version of original iGoat Objective C project. Using OWASP iGoat, you can learn exploiting and defending vulnerabilities in iOS Swift applications. Developed using Swif 4 and Ruby iGoat Objective C was presented at: OWASP TOP 10 Mobile Reverse Engineering Runtime Analysis Data...

Out-of-bounds Read

Overview Versions of stringstream before 0.0.6 are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below. Recommendation Upgrade to version 0.0.6 or later. References - HackerOne Report -...

Out-of-bounds Read

Overview Versions of base64url before 3.0.0 are vulnerable to to out-of-bounds reads as it allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below. Recommendation Update to version 3.0.0 or later. References - HackerOne Report - PR 25 - GitHub Advisory...

Out-of-bounds Read

Overview Versions of npmconf before 2.1.3 allocate and write to disk uninitialized memory contents when a typed number is passed as input on Node.js 4.x. Recommendation Update to version 2.1.3 or later. Consider switching to another config storage mechanism, as npmconf is deprecated and should no...

Out-of-bounds Read

Overview Versions of atob before 2.1.0 uninitialized Buffers when number is passed in input on Node.js 4.x and below. Recommendation Update to version 2.1.0 or later. References - HackerOne Report - GitHub Advisory...

Important: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

4-traders.com XSS vulnerability

Open Bug Bounty ID: OBB-615163 Description| Value ---|--- Affected Website:| 4-traders.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the microprogrammed software of the Infinia Hawkeye 4 gamma camera, related to the use of pre-set credentials, allows a intruder to gain access to the device.

The vulnerability of the microprogrammed software of the Infinia Hawkeye 4 gamma camera is related to the use of pre-set credentials. Exploiting this vulnerability can allow a remote attacker to gain access to the device...

cablofil.co.rs XSS vulnerability

Open Bug Bounty ID: OBB-613124 Description| Value ---|--- Affected Website:| cablofil.co.rs Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lipidmaps.org XSS vulnerability

Open Bug Bounty ID: OBB-611879 Description| Value ---|--- Affected Website:| lipidmaps.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 27 Update: gsoap-2.8.49-4.fc27

The gSOAP Web services development toolkit offers an XML to C/C++ language binding to ease the development of SOAP/XML Web services in C and C/C++...

ASUS infosvr - Authentication Bypass Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ASUS infosvr Auth Bypass Command Execution', 'Description' = %q This module exploits an authentication bypass vulnerability in the infosvr service...

How Big is the 4.x User Layer Disk, and How Can You Change That?

...

openssl/asn1: Heap-buffer-overflow in asn1_ex_i2c

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5721463706353664 Project: openssl Fuzzer: aflopensslasn1 Fuzz target binary: asn1 Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6030000029f1...

2018 年 4 月のセキュリティ更新プログラム (月例)

2018 年 4 月 11 日 日本時間、マイクロソフトは以下のソフトウェアのセキュリティ更新プログラムを公開しまし...

mesfilm.net XSS vulnerability

Open Bug Bounty ID: OBB-597350 Description| Value ---|--- Affected Website:| mesfilm.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID32384: Email Messages Distributing Malicious Software on April 4, 2018

Medium Alert ID: 57404 First Published: 2018 April 4 23:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32384 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32379: Email Messages Distributing Malicious Software on April 4, 2018

Medium Alert ID: 57401 First Published: 2018 April 4 23:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32379 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32371: Email Messages Distributing Malicious Software on April 4, 2018

Medium Alert ID: 57398 First Published: 2018 April 4 22:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32371 may contain the following files: Name | Siz...