Weather Channel Knocked Off-Air in Dangerous Precedent

On Thursday, The Weather Channel – a trusted cable network source of meteorological data across the U.S. – was knocked off the air by what it said was a “malicious software attack” on its network. The Weather Channel hack – not to be confused with the Weather Channel’s own hacks – affected its li...

CVE-2018-18500

creationtimestamp| type| source ---|---|--- 2019-04-18 07:17:58+00:00| published-proof-of-concept| https://t.me/br0wsec/86 2019-04-18 07:20:59+00:00| published-proof-of-concept| https://t.me/antichat/4512 2019-04-18 11:38:13+00:00| published-proof-of-concept| https://t.me/DC8044Info/188 2019-04-2...

Open-Xchange AppSuite 7.10.1 Information Disclosure / Improper Access Control

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 61771 Bug ID Vulnerability type: Information Exposure CWE-200 Vulnerable version: 7.10.1 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed Version: 7.6.3-rev44,...

SUSE-RU-2019:0863-1 Security update for SUSE Manager Server 3.1

This update fixes the following issues: cobbler: - Fixes case where distribution detection returns None bsc1130658 - SUSE texmode fix bsc1109316 - Fix for SUSE distribution detection in ISO building bsc1123991 py26-compat-salt: - Remove arch from name when pkg.listpkgs is called with 'attr'...

Security update for putty (moderate)

openSUSE Security Update: Security update for putty Announcement ID: openSUSE-SU-2019:1123-1 Rating: moderate References: 1129633 Cross-References: CVE-2019-9894 CVE-2019-9895 CVE-2019-9896 CVE-2019-9897 CVE-2019-9898 Affected Products: openSUSE Backports SLE-15 An update that fixes 5...

HackerOne: Invited team member can disclosure slack channels

Summary: Hello, this report is similar to 505493 also still waiting for response, but accent is totally on another thing. I think it is important and should be fixed, and so i create new report. Invited team member without any permission can disclosure private channel names of slack integration. ...

CVE-2018-1974

IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...

Code injection

IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...

CVE-2018-1974

IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...

CVE-2018-1974

IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...

CVE-2018-1974

CVE-2018-1974 affects IBM MQ (WebSphere MQ) 8.x and 9.x. The issue allows an authenticated attacker to escalate privileges when using multiplexed channels, due to how channels are multiplexed. Affected products/versions include IBM MQ v8 (8.0.0.0–8.0.0.10), MQ v9 LTS (9.0.0.0–9.0.0.5), MQ v9.1 CD...

Security Bulletin: IBM MQ is vulnerable to a privilege escalation attack when using multiplexed channels (CVE-2018-1974)

Summary IBM MQ could allow an authenticated attacker to escalate their privileges with channels that have multiplexing enabled. Vulnerability Details CVEID: CVE-2018-1974 DESCRIPTION: IBM MQ could allow an authenticated attacker to escalate their privileges when using multiplexed channels. CVSS...

PT-2019-2904 · Sox +2 · Sox +2

Name of the Vulnerable Software and Affected Versions: SoX versions 14.4.2 Description: The issue is related to an integer overflow in the channels start function of the SoX audio editor, which can lead to a heap-based buffer overflow. This can be exploited by a remote attacker to cause a denial ...

CVE-2018-18354

creationtimestamp| type| source ---|---|--- 2019-02-07 12:43:39+00:00| published-proof-of-concept| https://t.me/antichat/3530 2019-02-07 17:30:06+00:00| published-proof-of-concept| https://t.me/news4hack/251 2019-03-12 01:23:41+00:00| published-proof-of-concept| https://t.me/R0Crew/943...

CVE-2018-18311

creationtimestamp| type| source ---|---|--- 2019-02-07 08:30:33+00:00| published-proof-of-concept| https://t.me/novitollch/13 2019-02-08 06:11:34+00:00| published-proof-of-concept| https://t.me/novitollch/12 2019-02-21 01:55:08+00:00| published-proof-of-concept| https://t.me/novitollch/19...

DEBIAN-CVE-2018-18505

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

Mozilla: Privilege escalation through IPC channel messages

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

Mozilla: Privilege escalation through IPC channel messages

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

UBUNTU-CVE-2018-18505

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

Hacking the GCHQ Backdoor

Last week, I evaluated the security of a recent GCHQ backdoor proposal for communications systems. Furthering the debate, Nate Cardozo and Seth Schoen of EFF explain how this sort of backdoor can be detected: In fact, we think when the ghost feature is active­ -- silently inserting a secret...