473 matches found
Code injection
ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application...
CVE-2016-10673
ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application...
CVE-2016-10673
ipip-coffee is vulnerable to MITM attacks because it downloads geolocation resources over HTTP. The root cause is unencrypted HTTP resource retrieval, which can allow an attacker with a privileged network position to modify or read resources, impacting the integrity and availability of geolocatio...
‘Hacking’ the Nespresso Prodigio and Jura E8 coffee machines
You’ll probably know by now that I have a particular interest in the security of IoT coffee machines and tea kettles. Sometimes security is so poor that we have to laugh. Such simple security issues. Now, when I’m feeling lazy and possibly a bit hung over, I really can’t be bothered to make coffe...
Intel Halts Spectre Fixes On Older Chips, Citing Limited Ecosystem Support
Intel has halted patches for an array of older chips that would protect them against the Spectre vulnerability, according to a recent microcode update. The microcode update shows that its older products – including Wolfdale, Bloomfield, Clarksfield, Gulftown, Harpertown, Jasper Forest, SoFIA 3GR,...
Release Notes for Veeam Management Pack 8.0 Update 5
Challenge Release Notes for Veeam Management Pack 8.0 Update 5 Cause Please confirm you are running Veeam Management Pack 8.0 prior to installing this update. You can check this in Operations Manager console under Administration | Management Packs, the build number should be 8.0.0.2218 or later. ...
Intel Issues Updated Spectre Firmware Fixes For Newer Processors
Intel has issued updated microcode to help protect its newer processors from Spectre security exploits. The Santa Clara, Calif.-based company’s new microcode updates – which impact its newer chip platforms, such as Kaby Lake, Coffee Lake, and Skylake – have been released to OEM customers and...
iyfipgun.com XSS vulnerability
Open Bug Bounty ID: OBB-563306 Description| Value ---|--- Affected Website:| iyfipgun.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...
February 1, 2018 – Morning Cyber Coffee Headlines – “Super Bowl” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! February 1, 2018 - Headlines Carbon Black in the News: Kim Jong Nam met...
us.camposcoffee.com XSS vulnerability
Open Bug Bounty ID: OBB-524599 Description| Value ---|--- Affected Website:| us.camposcoffee.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
golden-coffee-tn.com XSS vulnerability
Open Bug Bounty ID: OBB-523831 Description| Value ---|--- Affected Website:| golden-coffee-tn.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
link.info.communitycoffee.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-355659 Description| Value ---|--- Affected Website:| link.info.communitycoffee.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
t-coffee ~/.t_coffee out-of-bounds write vulnerability
t-coffee is a multiple alignment tool for calculating and evaluating the sequence and structure of DNA, RNA and proteins. A security vulnerability exists in versions prior to t-coffee 11.00.8cbe486-2. A local attacker could exploit the vulnerability to write to a file...
CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
Code injection
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
UBUNTU-CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
