Google Chrome 70 - SQLite Magellan Crash (PoC)

This proof-of-concept crashes the Chrome renderer process using Tencent Blade Team's Magellan SQLite3 bug. It's based on a SQLite test case from the commit that fixed the bug. If you're using Chrome 70 or below, tap the button below to crash this page: Crash this page Your browser's user agent is...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

Information disclosure

The Fibre Channel over Ethernet FCoE feature in IBM System Networking and Blade Network Technology BNT switches running IBM Networking Operating System aka NOS, formerly BLADE Operating System floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow...

Enterprise Networking Operating System (ENOS) Authentication Bypass in Lenovo and IBM RackSwitch and BladeCenter Products - US

Lenovo Security Advisory: LEN-16095 Potential Impact: An attacker could gain access to the switch management interface, permitting settings changes that could result in exposing traffic passing through the switch, subtle malfunctions in the attached infrastructure, and partial or complete denial ...

How to configure console access on XenServer or Citrix Hypervisor

This article is for customers running Citrix Hypervisor or XenServer who want to configure serial console access to their XenServer hosts. In some support cases, serial console access to the XenServer host is required for debug purposes. The serial connection is to use with HyperTerminal or simil...

CVE-2017-6604

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System UCS...

CVE-2017-6604: URL Redirection to Untrusted Site

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System UCS...

Social Blade Statistics App - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Social Blade Statistics App published at the 'play' market has multiple vulnerabilities...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20161115)

Security Fixes : - It was found that stacking a file system over procfs in the Linux kernel could lead to a kernel stack overflow due to deep nesting, as demonstrated by mounting ecryptfs over procfs and creating a recursion by mapping /proc/environ. An unprivileged, local user could potentially...

RHEL 6 : kernel (RHSA-2016:2766)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2016-1542

The RPC API in RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure...

AXIS 2400+ Blade Video Server /view/view.shtml 越权访问漏洞

No description provided by source...

Armor Blade - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Armor Blade published at the 'play' market has multiple vulnerabilities...

Pixel F Blade - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pixel F Blade published at the 'play' market has multiple vulnerabilities...

Blood & Blade - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Blood & Blade published at the 'play' market has multiple vulnerabilities...

Cartoon Wars: Blade - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Cartoon Wars: Blade published at the 'play' market has multiple vulnerabilities...

Cisco Unified Computing System (5b)A on blade servers information disclosure vulnerability

Cisco Unified Computing System is the U.S. Cisco Cisco company's a set of computing, virtualization and networking in one platform. An information disclosure vulnerability exists in Cisco Unified Computing System 2.25bA on blade servers. This allows remote attackers to obtain potentially sensitiv...

CVE-2015-6355

The web interface in Cisco Unified Computing System UCS 2.25bA on blade servers allows remote attackers to obtain potentially sensitive version information by visiting an unspecified URL, aka Bug ID CSCuw87226...