CVE-2018-5915

CVE-2018-5915 : Exception in the Modem IP stack while processing IPv6 packets affects Qualcomm/Qualcomm-based Snapdragon automotive, mobile, and wearables platforms (MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/212/205, SD 425, SD 430, SD 712/710/670, SD 820/820A/835/845/850, SDA660, SD...

Mail.ru: ssl cookkie without secure flag set

Based on this report, decision was made to add SSL flag for session cookie and HSTS header for lootdog.io. Usually, HTTPS/SSL configuration reports are only accepted for Main Scope, this report was accepted/awarded as an exception...

NTPsec 1.1.2 - ntp_control (Authenticated) NULL Pointer Dereference (PoC)

NTPsec 1.1.2 - ntpcontrol Authenticated NULL Pointer Dereference PoC !/usr/bin/env python Exploit Title: ntpsec 1.1.2 authenticated NULL pointer exception Proof of concept Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website:...

NTPsec 1.1.2 ntp_control Null Pointer Dereference

!/usr/bin/env python Exploit Title: ntpsec 1.1.2 authenticated NULL pointer exception Proof of concept Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/bugs/ntpsec-authed-npe Vendor Homepage: https://ntpsec.org...

PHP 7.1.x < 7.1.1 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.1. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that is triggered when handling unserialized object properties. An unauthenticated, remote attacker c...

ICSA-19-038-01 Siemens SICAM A8000 RTU Series

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SICAM A8000 RTU Vulnerability: Uncaught Exception 2. RISK EVALUATION The SICAM A8000 RTU series is affected by a security vulnerability that could allow unauthenticated remote...

Fedora 28 : xen (2018-a7862a75f5)

preemption checks bypassed in x86 PV MM handling XSA-264, CVE-2018-12891 1595959 x86: DB exception safety check can be triggered by a guest XSA-265, CVE-2018-12893 1595958 libxl fails to honour readonly flag on HVM emulated SCSI disks XSA-266, CVE-2018-12892 1595957 Note that Tenable Network...

SUSE SLED15 / SLES15 Security Update : net-snmp (SUSE-SU-2018:3333-1)

This update for net-snmp fixes the following issues : Security issues fixed : CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Deni...

Memory corruption

An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted input, which leads to an out-of-memory exception...

CVE-2018-20652

An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted input, which leads to an out-of-memory exception...

WEM Admin console fails to connect with error "Error while connecting to the specified Infrastructure Server!"

WEM admin console fails to connect with error "Error while connecting to the specified Infrastructure Server!" The Citrix WEM Console Trace.Log file located in the user profile %username% reports the following error: "Exception - ConnectToBroker.Run : System.Net.Sockets.SocketException : No...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

DEBIAN-CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

Code injection

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

CVE-2018-20544

CVE-2018-20544 in libcaca 0.99.beta19 is a floating point exception in caca/dither.c (caca_dither_bitmap). Connected advisories show multiple vendors issuing fixes (e.g., openSUSE/SUSE, Ubuntu, Debian) and refer to a libcaca update that addresses this and related CVEs (20545–20549). The updates t...

EulerOS 2.0 SP2 : jasper (EulerOS-SA-2018-1417)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - jasper: reachable assertion in JPCNOMINALGAIN CVE-2016-9396 - jasper: NULL pointer exception in jp2encode CVE-2017-1000050 Note that Tenable...