Tor Browser Zero-Day Exploit Revealed Online – Patch Now

Zerodium, the infamous exploit vendor that earlier this year offered $1 million for submitting a zero-day exploit for Tor Browser, today publicly revealed a critical zero-day flaw in the anonymous browsing software that could reveal your identity to the sites you visit. In a Tweet, Zerodium share...

Tor Browser Zero-Day Exploit Revealed Online – Patch Now

Zerodium, the infamous exploit vendor that earlier this year offered $1 million for submitting a zero-day exploit for Tor Browser, today publicly revealed a critical zero-day flaw in the anonymous browsing software that could reveal your identity to the sites you visit. In a Tweet, Zerodium share...

CVE-2017-1679

IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001...

Information disclosure

IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001...

CVE-2017-1679

IBM OpenPages GRC Platform versions 7.2–8.0 are affected by CVE-2017-1679, an information-disclosure vulnerability that could allow an attacker to obtain sensitive data from error log files. The IBM security bulletin confirms the affected products and provides remediation: apply fixes for each ve...

CVE-2017-2795

An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this...

Heap overflow

An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this...

Heap overflow

An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger thi...

CVE-2017-2795

An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this...

CVE-2017-2792

AntennaHouse DMC HTMLFilter (used by MarkLogic 8.0-6) contains a heap-based buffer overflow in iBldDirInfo during Compound File Directory Entry parsing. The bug arises while converting Unicode names to SJIS for directory entries; the code increments the Name buffer index (v8) and the loop index (...

CVE-2017-2792

An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger thi...

CVE-2017-2795

CVE-2017-2795 exploits a heap overflow in Antenna House DMC HTMLFilter (Txo/Continue records). The code allocates a buffer with size derived from a field in TxO (bufferSize = 2 * word), then copies data into this buffer via a memcpy using a separate size from the Continue record. In observed samp...

Google Android System Information Disclosure Vulnerability (CNVD-2018-22647)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9, which can be exploited by attackers to obtain...

Google Android Framework elevation of privilege vulnerability (CNVD-2018-22766)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, which can be exploited by an attacker to elevat...

IBM Java SDK Remote Privilege Escalation Vulnerability - Linux

IBM Java SDK is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:javasdk";...

Google Android System Information Disclosure Vulnerability (CNVD-2018-18766)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android version 8.0 and 8.1. An attacker can exploit this vulnerability to obtain information...

Security Bulletin: One vulnerability in IBM Java SDK affects IBM Application Delivery Intelligence v1.0.1, v1.0.1.1, v1.0.2, v5.0.2, v5.0.2.1, v5.0.3, v5.0.4, v5.0.4.1 (CVE-2017-10356)

Summary There is one vulnerability in the following versions of IBM® SDK Java™ Technology Edition, which affects IBM® Application Delivery Intelligence ADI: - Version 7.1, that is used by ADI v1.0.1, v1.0.1.1, v1.0.2, v5.0.2, v5.0.2.1, and v5.0.3. - Version 8.0, that is used by ADI v5.0.4 and...

CVE-2018-9450

In avrcprocvendorcommand of avrcapi.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0...

PT-2018-10013 · Johnson Controls · Johnson Controls Metasys System +1

Name of the Vulnerable Software and Affected Versions: Johnson Controls Metasys System versions 8.0 and prior BCPro BCM versions prior to 3.0.2 Description: This issue results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain...

CVE-2018-9427

In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0...