10329 matches found
CVE-2019-10123
SQL Injection in Advanced InfoData Systems AIS ESEL-Server 67 which is the backend for the AIS logistics mobile app allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user...
Privilege escalation
The function getoptsimple as described in Advanced Bash Scripting Guide ISBN 978-1435752184 allows privilege escalation and execution of commands when used in a shell script called, for example, via sudo...
CVE-2019-9891
The CVE-2019-9891 entry concerns the getopt_simple function from the Advanced Bash Scripting Guide. Connected sources confirm that using this function in a shell script (e.g., invoked via sudo) can lead to privilege escalation and execution of attacker-controlled commands. Red Hat’s advisory reit...
Metabigor - Command Line Search Engines Without Any API Key
Command line Search Engine without any API key. What is Metabigor? Metabigor allows you do query from command line to awesome Search Engines like Shodan, Censys, Fofa, etc without any API key. But Why Metabigor? Don't use your API key so you don't have to worry about litmit of API quotation. Do...
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from incorrect validation of input data, allowing an attacker to execute arbitrary code.
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to improper validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recording...
PETRAWARE Technologies pTransformer Advanced Document Capture SQL Injection Vulnerability
PETRAWARE Technologies pTransformer Advanced Document Capture ADC is a suite of advanced document capture and categorization solutions from PETRAWARE Technologies, Malaysia. The product supports distributed document capture, automatic indexing, optical character recognition and automatic data...
Siemens CP-443-1 Advanced Communications Adapter Detection
Binary data 763938.prm...
Siemens SIMATIC CP 343-1 Advanced < 3.0.53 / CP 443-1 Advanced < 3.2.17 Multiple Vulnerabilities (ICSA-16-327-02)
Binary data 138.prm...
Debian: Security Advisory (DLA-1791-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-1771
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...
CVE-2019-1773
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...
CVE-2019-1771 Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerability
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...
Bots Tampering with TLS to Avoid Detection
Researchers at Akamai observed attackers using a novel approach for evading detection. This new technique - which we call Cipher Stunting - has become a growing threat, with its roots tracing back to early-2018. By using advanced methods, attackers are...
PT-2019-2195 · Cisco +1 · Cisco Webex Network Recording Player +2
Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description: A vulnerability exists due to improper validation of Advanced...
PT-2019-2194 · Cisco +1 · Cisco Webex Network Recording Player +2
Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description: A vulnerability exists due to improper validation of Advanced...
PT-2019-2155 · Cisco · Cisco Webex Network Recording Player +1
Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player versions affected versions not specified Cisco Webex Player versions affected versions not specified Description: The issue is related to improper validation of input data, specifically Advanced Recording...
ThreatList: Nigerian Cybercrime Surged 54 Percent in 2018
In 2018, Nigeria-based cybercrime jumped 54 percent over the previous year, as groups of scammers expanded their operations adding new tactics and reaching a wider breadth of targets. The increase, outlined in a report released Thursday by Palo Alto Network’s Unit 42, shows that Nigerian scammers...
Siemens CPU 1505SP and WinCC Runtime PLC Detection
Binary data 750318.prm...