CVE-2019-1750

Cisco IOS XE Software on Catalyst 4500 Series Switches is vulnerable in the Easy Virtual Switching System (VSS) to denial of service via unauthenticated, adjacent CDP packets. The root cause is incomplete error handling when processing CDP in VSS. An attacker can send a crafted CDP packet to caus...

Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

CVE-2019-1750: Improper Input Validation

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

PT-2019-15173

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software on Catalyst 4500 Series Switches affected versions not specified Description The issue is due to incomplete error handling when processing Cisco Discovery Protocol CDP packets used with the Easy Virtual Switching System. ...

WordPress Easy WP SMTP Plugin 1.3.9 RCE Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.142166";...

WordPress Easy WP SMTP Plugin Arbitrary Option Update

An arbitrary file option update exists in WordPress Easy WP SMTP Plugin. Successful exploitation can lead to modification of any options of an affected site...

Easy WP SMTP Plugin for WordPress 1.3.9 Unauthenticated Remote Code Execution

The Easy WP SMTP Plugin for WordPress running on the remote web server is version 1.3.9. It is, therefore, affected by an unauthenticated remote code execution vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid123004; scriptversion"1.3";...

CVE-2018-17491

EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing "esc" to exit the program, an attacker could exploit this vulnerability to perform unauthorized actions on the computer...

EasyLobby Solo Default Management Credentials Vulnerability

HID Global EasyLobby Solo is a suite of Secure Visitor Management SVM software from HID Global, USA. A security vulnerability exists in HID Global EasyLobby Solo version 11.0.4563, which stems from the program's use of default administrative credentials. A local attacker could exploit the...

EasyLobby Solo Information Disclosure Vulnerability

HID Global EasyLobby Solo is a suite of Secure Visitor Management SVM software from HID Global, USA. An information disclosure vulnerability exists in HID Global EasyLobby Solo version 11.0.4563, which stems from the program storing Social Security numbers in plaintext. A local attacker could...

WordPress Easy WP SMTP plugin <= 1.3.9 - Unauthenticated arbitrary "wp_options" import vulnerability

Unauthenticated arbitrary "wpoptions" import vulnerability found Jerome Bruandet in WordPress Easy WP SMTP plugin versions = 1.3.9. Solution Update the WordPress Easy WP SMTP plugin to the latest available version at least 1.3.9.1...

Easy WP SMTP <= 1.3.9 - Unauthenticated Arbitrary wp_options Import

The changelog for easy-wp-smtp detailed that they "fixed potential vulnerability in import\export settings." in 1.3.9.1 of the plugin SVN changeset 2052058. This was released on 17th March 2019. It appears that an unauthenticated user can import arbitrary wpoptions by providing a PHP serialized...

CVE-2019-0255

SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The...

CVE-2019-0255

SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The...

CVE-2019-0255: Improper Input Validation

SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The...

PT-2019-1732

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP Platform versions 7.73 through 7.75 Description The issue is related to insufficient input validation, which can be exploited by a remote attacker to elevate privileges. This behavior may lead to a situation where a...

Easy Shop ,1.2.3 ,Other

Easy Shop ,1.2.3 ,Other Developer update 1.2.4 https://www.joomtech.net/blog/easyshop-1-2-4-security-issues-fixed Developer did not tellvel...

How to Recover Lost or Deleted Files?

Have you ever lost your important files, like memories or official documents, accidentally or maliciously? Adding more... when you even do not have any backup for the same. Unfortunate, right? We've all been there. Just last week I formatted my computer and later found that I didn't have any back...

Easy Video To iPod Converter 1.6.20 Buffer Overflow

Exploit Title: Easy Video to iPod Converter - Local Buffer Overflow SEH Date: 2019-01-26 Exploit Author: Nawaf Alkeraithe Twitter: @Alkeraithe1 Vulnerable Software: Easy Video to iPod Converter 1.6.20 Vendor Homepage: http://www.divxtodvd.net/ Version: 1.6.20 Software Link:...

Easy Video to iPod Converter 1.6.20 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: Easy Video to iPod Converter - Local Buffer Overflow SEH Exploit Author: Nawaf Alkeraithe Twitter: @Alkeraithe1 Vulnerable Software: Easy Video to iPod Converter 1.6.20 Vendor Homepage: http://www.divxtodvd.net/ Version: 1.6.2...