7734 matches found
Vulnerabilities fixed in ClamAV
Vulnerabilities have been fixed in ClamAV. The vulnerabilities allow a malicious person to cause a denial-of-service cause. ClamAV has released updates to fix the vulnerabilities. More information can be found on the pages below: https://blog.clamav.net/2020/07...
coderedcms (>=0.18.0 <=0.18.2), coop (>=2.8.0 <=2.8.2) +12 more potentially affected by CVE-2020-15118 via wagtail (>=2.8.0 <=2.8.2)
wagtail PYPI version =2.8.0, =0.18.0, =2.8.0, =0.0.5, =4.1.0, =0.5.0, =1.0.0, =0.22.0, =0.9.8, =3.8.0, =3.9.0 Source cves: CVE-2020-15118 Source advisory: OSV:GHSA-2473-9HGQ-J7XW...
Microsoft Addresses 'Wormable' RCE Vulnerability in Windows DNS Server
Microsoft has released a security update to address a remote code execution RCE vulnerability—CVE-2020-1350—in Windows DNS Server. A remote attacker could exploit this vulnerability to take control of an affected system. This is considered a “wormable” vulnerability that affects all Windows Serve...
Lee Lei's blog ne***_sh***.php file suffers from SQL injection vulnerability
Li Lei blog is an open source PHP blog management system . Li Lei blog nesh.php file suffers from SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...
Lee Lei's blog ne***_sh***.php file suffers from SQL injection vulnerability (CNVD-2020-48639)
Li Lei blog is an open source PHP blog management system . Li Lei blog nesh.php file suffers from SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...
Li Lei's blog suffers from a file upload vulnerability (CNVD-2020-47302)
Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...
Lee Lei's blog sh***_m***.php page suffers from SQL injection vulnerability
Li Lei blog is an open source PHP blog management system . Li Lei blog shm.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
SQL Injection Vulnerability in Li Lei's Blog gi***.php Page
Li Lei blog is an open source PHP blog management system . Li Lei blog gi.php page SQL injection vulnerability, an attacker can exploit the vulnerability to obtain sensitive database information...
Lee Lei's blog ne***_sh***.php page suffers from a SQL injection vulnerability
Li Lei blog is an open source PHP blog management system . Li Lei blog nesh.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...
Responsive Online Blog 1.0 SQL Injection Vulnerability (2)
Exploit for php platform in category web applications Exploit Title: Responsive Online Blog 1.0 - 'single.php?id=' SQL Injection Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...
Responsive Online Blog 1.0 SQL Injection
Exploit Title: Responsive Online Blog 1.0 - 'single.php?id=' SQL Injection Date: 2020-07-03 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...
Li Lei's blog suffers from SQL injection vulnerability (CNVD-2020-47313)
Li Lei blog is an open source PHP blog management system . Li Lei Blog has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Li Lei's blog has a file upload vulnerability
Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...
FreeBSD : mybb -- multible vulnerabilities (198a120d-c22d-11ea-9172-4c72b94353b5)
mybb Team reports : High risk: Installer RCE on settings file write Medium risk: Arbitrary upload paths and Local File Inclusion RCE Medium risk: XSS via insufficient HTML sanitization of Blog feed and Extend data Low risk: Open redirect on login Low risk: SCEditor reflected XSS C Tenable Network...
How To Protect Your Kubernetes Cluster with Wallarm – Running in Production Mode – part 3 of 3
The previous two blog articles in this series describe how to set up Wallarm Ingress controller and configure it so that it can properly allow or block traffic from trusted or suspicious/malicious IP addresses. This is essential to the functionality of Wallarm’s Ingress controller but it isn’t...
Friday Squid Blogging: Strawberry Squid
Pretty. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Afternoon Cyber Tea: Cybersecurity & IoT: New risks and how to minimize them
Recently, Microsoft announced our acquisition of CyberX, a comprehensive network-based security platform with continuous threat monitoring and analytics. This solution builds upon our commitment to provide a unified IoT security solution that addresses connected devices spread across both...
Beers with Talos Ep. #85: The In-Between, Vol. 5
Beers with Talos BWT Podcast episode No. 85 is now available. Download this episode and subscribe to Beers with Talos:Apple Podcasts Google Podcasts Spotify Stitcher If iTunes and Google Play aren't your thing, click here. By Mitch Neff. Recorded May 29, 2020 Prod. Note: Things are a hot mess rig...
Java Deserialization Exploitation With Customized Ysoserial Payloads
The post Java Deserialization Exploitation With Customized Ysoserial Payloads appeared first on Rhino Security Labs...
Responsive Online Blog 1.0 - (id) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Responsive Online Blog 1.0 - 'id' SQL Injection Exploit Author: Eren Şimşek Vendor Homepage: https://www.sourcecodester.com/php/14194/responsive-online-blog-website-using-phpmysql.html Software Link:...