The Pirate Bay was recently down for over a week due to a DDoS attack

It seems like the prolonged downtime and technical difficulties faced by The Pirate Bay over the past several weeks were due to a series of distributed denial of service DDoS attacks against the widely-popular torrent website by malicious actors. For those unaware, The Pirate Bay was down for mor...

Android libgui Privilege Escalation

The vulnerability of the Android operating system’s libgui library arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Check Point Security Gateway Resource Release DoS

The multiple vulnerabilities of Check Point Security Gateway are related to resource release errors. Exploitation of these vulnerabilities can allow a malicious actor to cause service failures remotely...

Secure Copy DoS

The vulnerability of the Secure Copy function in Cisco Adaptive Security Appliance ASA microprogramming software is related to type determination errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco SPA100 Series DoS

The vulnerability of the web interface for managing Microprogramming-based IP phones from the Cisco SPA100 series is related to errors during the verification of user requests sent to the web management interface. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Check Point Security Gateway Resource Release DoS

The vulnerability of Check Point Security Gateway relates to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by redirecting users to the UserCheck page...

Check Point Security Gateway Resource Release DoS

The vulnerability of Check Point Security Gateway relates to resource release errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through specially crafted HTTPS requests...

VBScript Script Handler Code Execution

The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

VMware vCenter Server Appliance Information Disclosure Vulnerability

VMware vCenter Server Appliance is a set of pre-configured Linux virtual machines from VMware. An information disclosure vulnerability exists in VMware vCenter Server Appliance versions 6.7 and 6.5, which arises from errors in configuration and other errors in the operation of a networked system ...

Dnsmasq Information Disclosure Vulnerability (CNVD-2019-39404)

Dnsmasq is a lightweight, easy-to-configure DNS forwarder and DHCP server. An information disclosure vulnerability exists in Dnsmasq, which arises from errors in configuration and other errors in the operation of a network system or product, and can be exploited by an unauthorized attacker to...

Elasticsearch Information Disclosure Vulnerability (CNVD-2019-39403)

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON. There is an information disclosure vulnerability in Elasticsearch , the vulnerabili...

Windows Code Data Compromise Module

The vulnerability of the Windows Code Integrity Module in operating systems relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows Memory Object Error System Failure

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Ratpack Input Validation Error Vulnerability

Ratpack is a Java library for building scalable HTTP applications. An input validation error vulnerability exists in Ratpack versions prior to 1.7.5, which can be exploited to conduct http response splitting attacks by constructing HTTP headers with untrusted data...

UBUNTU-CVE-2019-17577

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Email used for error returns emails fields 'Errors-To' in emails sent" field...

CVE-2019-17577: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Email used for error returns emails fields 'Errors-To' in emails sent" field...

PT-2019-15209 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 10.0.2 Description: The issue is related to a security problem where an attacker can inject malicious code. This is possible through the "outgoing email setup" feature, specifically in the "/admin/mails.php?action=edit" API...

Junos OS Authentication Bypass

The vulnerability of the Junos OS router of the NFX Series is related to errors in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to the Junos Device Manager JDM and gain full control over the system...

Blink Web Page Confidential Data

The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to access control policy errors. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

jdhcpd Junos OS DoS

The vulnerability of the jdhcpd daemon in Junos OS MX Series routers is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted DHCP packets...