CVE-2019-3819

A flaw was found in the Linux kernel in the function hiddebugeventsread in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user "root" can cause a system lock up and a denial of service. Versions from v4.18 and newe...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17626

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17626

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-3462

creationtimestamp| type| source ---|---|--- 2019-01-22 17:40:03+00:00| seen| https://t.me/canyoupwnme/5039 2019-01-23 08:41:50+00:00| seen| https://t.me/thehackernews/178 2019-01-23 11:22:52+00:00| seen| https://t.me/SecLabNews/4085 2019-01-31 10:11:02+00:00| published-proof-of-concept|...

Rockwell Automation FactoryTalk Alarms and Events Detection (Windows SMB Login)

SMB login-based detection of Rockwell Automation FactoryTalk Alarms and Events. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

DotNetNuke Events Calendar 1.x File Download

Exploit Title : DNNSoftware EventsCalendar Modules 1.x Arbitrary File Download Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/01/2019 Vendor Homepage : dnnsoftware.com Software Information Link : store.dnnsoftware.com/home/product-details/events-calendar...

CVE-2016-4644

creationtimestamp| type| source ---|---|--- 2019-01-11 20:48:42+00:00| seen| https://t.me/cibsecurity/2000 2019-01-17 20:22:10+00:00| seen| https://t.me/cibsecurity/2105...

CVE-2017-13889

creationtimestamp| type| source ---|---|--- 2019-01-11 20:48:35+00:00| seen| https://t.me/cibsecurity/1995 2019-01-17 17:12:39+00:00| seen| https://t.me/cibsecurity/2097...

Cisco Policy Suite for Mobile and Policy Suite Diameter Routing Agent Access Bypass Vulnerabilities

A security vulnerability exists in the Redis implementation process in Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent. A remote attacker could exploit the vulnerability to modify the key-value pairs of transient events stored by the Redis server...

CVE-2016-10736

creationtimestamp| type| source ---|---|--- 2019-01-10 02:58:17+00:00| seen| https://t.me/cibsecurity/1962 2019-01-15 18:57:34+00:00| seen| https://t.me/cibsecurity/2039...

CVE-2018-0181

A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to...

UBUNTU-CVE-2018-16088

A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page...

Design/Logic Flaw

A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page...

Nextcloud: Private/confidential setting of calendar events is ignored on activity stream

https://github.com/nextcloud/server/pull/13331 Events that are private should not generate events for other users Events that are confidential should not leak the name to other users Impact The details are leaked to other users...

Fedora 28 : mozilla-noscript (2018-e9821afbca)

Changes since 10.1.8.16: === v 10.1.9.6 ============================================================= - TB Gracefully handle legacy external message recipients - XSS Updated known HTML5 events - Better IPV6 support - UI support for protocol-only entries v 10.1.9.5...

Read: New Attack Analytics Dashboard Streamlines Security Investigations

Attack Analytics, launched this May, aimed to crush the maddening pace of alerts that security teams were receiving. For security analysts unable to triage this avalanche of alerts, Attack Analytics condenses thousands upon thousands of alerts into a handful of relevant, investigable incidents...

CVE-2018-2497

The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE AS SELECT...

CVE-2018-2497

SAP HANA audit logs fail to record SELECT events when they appear as part of CREATE TABLE AS SELECT in versions 1.0 and 2.0. This could leave such statements partially unlogged, limiting audit visibility for these CREATE TABLE AS SELECT constructs. The provided documents do not include a patch/r...

CVE-2018-2497

The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE AS SELECT...