The vulnerability of the ModPlug_InstrumentName and ModPlug_SampleName functions in the libopenmpt_modplug.c library, which are used for processing modular music, is related to buffer overflows in memory. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ModPlugInstrumentName and ModPlugSampleName functions libopenmptmodplug.c in the library for handling modular music allows for errors during the verification of data provided by users before they are copied to a fixed-size buffer. Exploiting this vulnerability enables an...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from insufficient checking of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created application...

The vulnerability of the NX-API network operating system in Cisco NX-OS routers allows a attacker to induce a service failure.

The vulnerability of the NX-API network operating system in Cisco NX-OS routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability in the web interface of the Cisco Integrated Management Controller, a software tool for remote administration of servers, allows a perpetrator to execute arbitrary commands with root privileges.

The vulnerability of the web interface for managing Cisco Integrated Management Controllers involves errors during the verification of data entered by the user in the Certificate Request Service function. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with ro...

The vulnerability of the network software SKS Keyserver and the GNU Privacy Guard (GnuPG) software for encrypting information and generating digital signatures arises from the lack of verification of host data in the certificates. This allows attackers to trigger a service failure.

The vulnerability of the network software SKS Keyserver and the information encryption and digital signatures generation programs of GNU Privacy Guard GnuPG is related to the lack of verification of host data in the certificates. Exploiting this vulnerability could allow a malicious actor to caus...

The vulnerability of Microprogrammed Software in Cisco Small Business routers of the Sx200, Sx300, Sx500, ESW2, Sx250, Sx350, and Sx550 series exists due to insufficient testing of input data. This allows attackers to trigger service failures.

The vulnerability of Cisco Small Business router microprogramming software of models Sx200, Sx300, Sx500, ESW2, Sx250, Sx350, and Sx550 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending malicious...

WordPress WooCommerce Plugin Authentication Bypass (CVE-2018-20782)

An authentication bypass exists in WordPress WooCommerce Plugin. The vulnerability is due to insufficient data verification and lack of any cryptographic authentication. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request...

The vulnerability of the GnuTLS cryptographic library, related to an error in verifying decrypted RSA data, allows a perpetrator to gain access to protected information.

The vulnerability of the GnuTLS cryptographic library is related to an error in the verification of decrypted RSA data. Exploiting this vulnerability could allow an attacker to gain access to protected information by using a secondary cache channel...

WordPress WooCommerce GloBee Payment Gateway 1.1.1 Bypass / Spoofing

?php Exploit Title: WordPress WooCommerce - GloBee cryptocurrency Payment Gateway Plugin Payment Bypass / Unauthorized Order Status Spoofing Discovery Date: 14.12.2018 Public Disclosure Date: 14.02.2019 Exploit Author: GeekHack Contact: https://t.me/GeekHack Vendor Homepage: https://globee.com/...

Advantech WebAccess SCADA Buffer Overflow (CVE-2018-7499)

A overflow vulnerability exists in the service of Advantech WebAccess. The vulnerability is due to a lack of data verification. Successful exploitation could lead to arbitrary code execution...

GDB-Connector

GDB Connector is a remote script to use for controlling a remote target and debug an exploit on a target directly from Exploit Pack. Copy this script to your target and execute it to connect back to your framework. Shell Script created using Exploit Pack http://www.exploitpack.com -...

The vulnerability of Modicon microprogrammed control devices, related to insufficient verification of input data, allows attackers to redirect users to malicious websites.

The vulnerability of Modicon controller microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to redirect users to a malicious website remotely...

CVE-2018-10626

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLin...

The vulnerability in Siemens SIMATIC and OpenPCS 7 industrial equipment, related to insufficient verification of input data, allows a intruder to trigger a service failure.

The vulnerability in Siemens SIMATIC and OpenPCS 7 industrial equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger a maintenance failure by sending a specially crafted request through the remote control service of...

The vulnerability of the microprogramming software of the NR Electric PCS-9611 protection device arises from insufficient verification of input data. This vulnerability allows a perpetrator to gain access to arbitrary system resources and influence the functionality of the system.

The vulnerability of the microprogramming software of the NR Electric PCS-9611 protection device exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to arbitrary system resources and influence the...

The vulnerability of the eMBMS kernel technology of the Linux operating system in the Android repository CAF allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the eMBMS kernel technology of the Linux operating system in the Android repository CAF is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

CVE-2016-6620

An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize function without verification that it's valid serialized data. The unserialization can result in code execution because of the interaction with object instantiation and autoloading. All 4.6.x versions prior to 4.6.4...

Yahoo Investigates 200 Million Alleged Accounts For Sale On Dark Web

Yahoo says it is investigating reports of 200 million user credentials advertised for sale on the Dark Web by a hacker that goes by the handle “peaceofmind”. The Yahoo credentials, according to the site listing the database for sale, includes usernames, passwords hashed using the MD5 algorithm,...