Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation

Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The LUAFV driver doesn’t take into account a virtualized handle bei...

Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Exploit

Exploit for windows platform in category local exploits Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The LUAFV...

CVE-2019-1000047

CVE-2019-1000047 is a reservation/duplicate of CVE-2013-7469. Connected documents describe the underlying issue as Seafile (through 6.2.11) using the same Initialization Vector in CBC mode to encrypt private data, enabling easier chosen-plaintext/dictionary attacks. There is no independent detail...

Friday Squid Blogging: The Hawaiian Bobtail Squid Genome

The Hawaiian Bobtail Squid's genome is half again the size of a human's. Other facts: The Hawaiian bobtail squid has two different symbiotic organs, and researchers were able to show that each of these took different paths in their evolution. This particular species of squid has a light organ tha...

Fedora 28 : polkit (2019-b1da89df11)

Due to kernel issue there is a way to reuse starttime of a process. This allows to duplicate process authorized by polkit. This update mitigates polkit issue 75 slowfork: https://gitlab.freedesktop.org/polkit/polkit/issues/75 Note that Tenable Network Security has extracted the preceding...

Polylang <= 2.5 - CSRF in categories and media duplication

The Polylang WordPress plugin was affected by a CSRF in categories and media duplication security vulnerability...

Fedora 29 : polkit (2019-e957cecffd)

Due to kernel issue there is a way to reuse starttime of a process. This allows to duplicate process authorized by polkit. This update mitigates polkit issue 75 slowfork: https://gitlab.freedesktop.org/polkit/polkit/issues/75 Note that Tenable Network Security has extracted the preceding...

Mail.ru: Дюп предметов lootdog и возможность их продавать.

It was possible to duplicated item for sale infinitely via modified request on lootdog.io...

QIWI: account takeover https://idea.qiwi.com/

Здравствуйте. Обнаружил account takeover на данном сайте. С воспроизведением придется поднапрячься, но это стоит того. Учитывая то, что на сайте есть админский аккаунт, в теории можно натворить делов. Скажу сразу, что мне не удалось полностью понять механизм работы данного тейковера и я буду очен...

WordPress Tooltipy 5.0 Cross Site Request Forgery

Details ================ Software: Tooltipy tooltips for WP Version: 5.0 Homepage: https://wordpress.org/plugins/bluet-keywords-tooltip-generator/ Advisory report: https://advisories.dxw.com/advisories/csrf-in-tooltipy/ CVE: Awaiting assignment CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N...

CVE-2018-3736

CVE-2018-3736 is a rejected/duplicate candidate that refers to CVE-2018-3739. The Red Hat entry for CVE-2018-3736 confirms it duplicates CVE-2018-3739 and that all references for 3736 were removed to prevent accidental usage. CVE-2018-3739 describes a Node.js https-proxy-agent vulnerability where...

CVE-2015-1957

IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-in-the-middle attack, related to duplication of message data in cleartext outside the protected payload. IBM X-Force ID: 103482...

CVE-2018-9317

CVE-2018-9313 describes a vulnerability in BMW i/X/3/5/7 series Head Unit HU_NBT (Infotainment) from 2012–2018. A remote Bluetooth attack, usable when in pairing mode, could reboot the Head Unit. Affected component: HU_NBT Infotainment; impact: head unit reboot per description. Vulnerability deta...

UBUNTU-CVE-2018-0491

A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service relay crash because the KIST implementation allows a channel to be added more than once in the pending list...

CVE-2017-18196

Leptonica 1.74.4 constructs unintended pathnames containing duplicated path components when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as...

CVE-2018-1000016

CVE-2018-1000016 is rejected and not an active vulnerability entry; reference CVE-2017-17383 instead.

CVE-2017-17457

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2017-17456

CVE-2017-17456 is rejected/not used; refer to CVE-2017-14245.

Mentalist - Graphical Tool For Custom Wordlist Generation

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper. Install from Source Prerequisites Linux APT package manager Check if Python 3 ...

Low: Red Hat Enhancement Advisory: Red Hat Virtualization Manager (ovirt-engine) 4.1.7

An update is now available for Red Hat Virtualization Manager. The Red Hat Virtualization Manager is a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities,...