Linux kernel security bypass vulnerability (CNVD-2018-24544)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 4.18.6 and earlier, which stems from a program's failure to properly validate access rights. A local attacker...

Mikrotik Winbox Arbitrary File Access Vulnerability

MikroTik RouterOS is a routing operating system, developed based on the Linux kernel, compatible with x86 PC routing software, through which a standard PC computer can be turned into a professional router.Winbox is a Windows-based software for remote management of RouterOS, providing an intuitive...

Cisco Meeting Server Information Disclosure Vulnerability

A vulnerability in Cisco Meeting Server CMS could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces and ports o...

MakeMyTrip 7.2.4 - Information Disclosure

Exploit Title: Android Application MakeMyTrip 7.2.4 - Unencrypted Database Files Date: 2018-05-21 Software Link: MakeMyTrip v7.2.4 Android Application Exploit Author: Divya Jain Version: 7.2.4 Android App CVE: CVE-2018-11242 Category: Mobileapps Tested on: Android v5.1 1. Description Android...

Cisco Meeting Server Remote Code Execution Vulnerability

Cisco Meeting Server CMS Acano X-series is a conferencing server from Cisco, U.S.A. Cisco Meeting Server CMS Software is a videoconferencing system that runs on it. A misconfiguration vulnerability exists in CMS Software versions prior to 2.2.11 on the CMS Acano X-series platform. A remote attack...

Remote code execution

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information in, an affected system, leading to Remote Code Execution. The vulnerability is due to incorrect default configuration of the device, which...

CVE-2018-1037

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database PDB files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio...

SUSE-SU-2018:0307-1 Security update for libapr-util1

This update for libapr-util1 fixes the following issues: Security issue fixed: - CVE-2017-12618: DoS via crafted SDBM database files in aprsdbm functions bsc1064990...

openSUSE Security Update : libapr-util1 (openSUSE-2017-1370)

This update for libapr-util1 fixes the following issues : Security issue fixed : - CVE-2017-12618: DoS via crafted SDBM database files in aprsdbm functions bsc1064990 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SUSE-SU-2017:3278-1 Security update for libapr-util1

This update for libapr-util1 fixes the following issues: Security issue fixed: - CVE-2017-12618: DoS via crafted SDBM database files in aprsdbm functions bsc1064990...

Telegram Messenger for iOS and Android Information Disclosure Vulnerability

Telegram Messenger for iOS and Android is a suite of mobile messaging tools based on the iOS and Android platforms. An information disclosure vulnerability exists in Telegram Messenger version 2.6 for iOS and Telegram Messenger version 1.8.2 for Android. The vulnerability can be exploited to obta...

IdeaCMS v2.0.7 suffers from information leakage vulnerability

IdeaCMS is based on Asp+Access/Mssql environment developed by the day side of the network technology limited company of rapid station-building system. IdeaCMS v2.0.7 exists information leakage vulnerability. An attacker can exploit the vulnerability to download database files and obtain sensitive...

Microsoft Windows JET Database Engine Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.JET Database Engine is one of the database engines. A remote code execution vulnerability exists in JET Database Engine in Microsoft Windows. A remote attacker can exploit this vulnerability to execute code on an affected...

Access restriction bypass to delete DBM files in Cybozu Dezie

Overview Cybozu Dezie provided by Cybozu,Inc. contains an access restriction bypass vulnerability to delete DBM Cybozu Dezie proprietary format files. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under th...

Access restriction bypass to download DBM files in Cybozu Dezie

Overview Cybozu Dezie provided by Cybozu,Inc. contains an access restriction bypass vulnerability to download DBM Cybozu Dezie proprietary format files. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under...

PHPCMS V9 Trojan Bypass Configuration Vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. PHPCMS V9 Trojan horse checking at the existence of bypass configuration vulnerability, allowing attackers to exploit the...

Pulp Information Disclosure Vulnerability (CNVD-2016-05111)

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A local information disclosure vulnerability exists in Pulp that stems from the program creating certificate files and database files that are stored...

SQL Injection Vulnerability in Jinhe IOAS Standard Office System for SMBs

Beijing Jinhe Network Co., Ltd. is an enterprise that provides informationization solutions and collaborative management software, and IOAS Standard Office System for Small and Medium-sized Enterprises is one of the products of Beijing Jinhe Network Co. SQL injection vulnerability exists in IOAS...

XLineSoft ASPRunner 1.0/2.x export.asp SQL Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/10799/info ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files. ASPRunner versions 2.4...

XLineSoft ASPRunner 1.0/2.x [TABLE]_list.asp SearchFor Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/10799/info ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files. ASPRunner versions 2.4...