EUVD-2019-2738

Malware in sbrugna...

CVE-2019-11030: Deserialization of Untrusted Data

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security.DataCrypt method in Common.dll in AuditTrailService in SMServer.exe. This method triggers insecure deserialization within the .NET garbage collector, in which a gadget contained in a serialized object may...

Novell ZENworks Handheld Management Common.dll messageID Request Field Parsing Traversal Arbitrary File Creation

The version of the 'Common.dll' library included with the ZENworks Handheld Management install on the remote Windows host is affected by a directory traversal vulnerability because it fails to sanitize user input to the 'messageID' field in requests of directory traversal sequences. An...