9581 matches found
events.lifetouch.com XSS vulnerability
Vulnerable URL: https://events.lifetouch.com/userView.aspx?ImageID=23218425=141055-010-043=141055!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS...
Information Disclosure
Moodle is vulnerable to information disclosure. A malicious user can pass a web-service request to the application to get sensitive information about calendar events...
Fedora 25 : 2:qemu (2017-f941184db1)
CVE-2017-7718: cirrus: OOB read access issue bz 1443443 - CVE-2016-9603: cirrus: heap buffer overflow via vnc connection bz 1432040 - CVE-2017-7377: 9pfs: fix file descriptor leak bz 1437872 - CVE-2017-7980: cirrus: OOB r/w access issues in bitblt bz 1444372 - CVE-2017-8112: vmwpvscsi: infinite...
log4j: Socket receiver deserialization vulnerability
It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...
USN-3362-1: X.Org X server vulnerabilities
It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an administrator. CVE-2017-10971 It was...
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3360-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3360-1 advisory. It was discovered that the Linux kernel did not properly initialize a Wake- on-Lan data structure. A local attacker could use this to expose sensitive...
Ubuntu: Security Advisory (USN-3360-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Don't Say Goodbye to Your OTT Viewers
Takes a second to say goodbye Say goodbye, oh, oh, oh It takes a second to say goodbye Say goodbye, oh, oh, oh, say bye bye Where you going to now When U2 penned the lyrics to its song, "Seconds," in 1983, there was no such thing as online video. In fact, video had killed the radio star only four...
USN-3360-1: Linux kernel vulnerabilities
It was discovered that the Linux kernel did not properly initialize a Wake- on-Lan data structure. A local attacker could use this to expose sensitive information kernel memory. CVE-2014-9900 It was discovered that the Linux kernel did not properly restrict access to /proc/iomem. A local attacker...
CVE-2017-10971
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events...
CVE-2017-6753
creationtimestamp| type| source ---|---|--- 2017-07-17 19:32:37+00:00| seen| https://t.me/informationsecuritychannel/6874 2017-07-17 19:34:09+00:00| seen| https://t.me/canyoupwnme/1776 2017-07-18 07:40:57+00:00| seen| https://t.me/informationsecuritychannel/6886 2017-07-18 13:42:57+00:00| seen|...
CVE-2017-11318
Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abusing pre-backup events...
Security update for xorg-x11-server (important)
This update for xorg-x11-server fixes the following issues: - CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. bnc1035283 - Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range. - CVE-2017-10972: Initialize t...
goethe.de XSS vulnerability
Vulnerable URL: https://www.goethe.de/ins/co/es/ver.cfm?fuseaction=events.detail"--!"id=20955826 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9503 VIP website status:| Yes Check...
NemucodAES Ransomware, Kovter Click-Fraud Malware Spreading in Same Campaigns
Two malware families, NemucodAES and Kovter, are being packaged together in .zip attachments and delivered via active spam campaigns. Researcher Brad Duncan said, “together these two pieces of malware could deliver a nasty punch.” Duncan, a handler at the SANS Institute Internet Storm Center, sai...
CVE-2017-11318
Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abusing pre-backup events...
Not All Threats Are Created Equal
In today’s world, security teams are bombarded constantly with security events and threat information from multiple sources, making it impossible to address each threat with the same amount of urgency. Where does one even start? We know every threat should be addressed, but not all threats are...
CVE-2017-10971
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events...
Stack overflow
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events...
DEBIAN-CVE-2017-10971
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events...