7562 matches found
CVE-2019-18317
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from...
CVE-2019-15931
Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246...
USN-4211-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Zhipeng Xie discovered that an infinite loop could be triggered in the CFS Linux kernel process scheduler. A local attacker could possibly use this to cause a denial of service. CVE-2018-20784 Nicolas Waisman discovered that the WiFi driver stack in the Linux kernel did not properly validate SSID...
SCShell - Fileless Lateral Movement Tool That Relies On ChangeServiceConfigA To Run Command
Fileless lateral movement tool that relies on ChangeServiceConfigA to run command. The beauty of this tool is that it doesn't perform authentication against SMB everything is performed over DCERPC. The utility can be used remotely WITHOUT registering a service or creating a service. It also doesn...
CVE-2019-17515
The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and...
CVE-2019-17515
The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and...
PT-2019-15180
Name of the Vulnerable Software and Affected Versions cleantalk-spam-protect plugin versions prior to 5.127.4 Description The issue allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. This is possible when the Administrator is logged in and a reflected...
PT-2019-15220
Name of the Vulnerable Software and Affected Versions Quiz And Survey Master plugin versions prior to 6.3.5 Description The issue allows an attacker to execute arbitrary HTML and JavaScript code. This can occur via the from or till parameter, and/or the quiz id parameter, in the...
CVE-2019-17515: Improper Neutralization of Input During Web Page Generation
The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and...
visagehall.ru Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3650 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting visagehall.ru website and its users. Following coordinate...
PT-2019-20412
Уязвимость функции read name from file утилиты архивирования Cpio связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
PT-2019-4148
Name of the Vulnerable Software and Affected Versions Libarchive version 3.4.0 Description The issue is related to an out-of-bounds read in the archive wstring append from mbs function in archive string.c. This occurs due to an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes when...
Mysterious malware that re-installs itself infected over 45,000 Android Phones
Over the past few months, hundreds of Android users have been complaining online of a new piece of mysterious malware that hides on the infected devices and can reportedly reinstall itself even after users delete it, or factory reset their devices. Dubbed Xhelper , the malware has already infecte...
Medium: python27, python34, python35, python36
Issue Overview: An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on th...
Adobe ColdFusion File Upload (APSB18-33) (CVE-2018-15961)
An arbitrary file upload vulnerability exists in Adobe ColdFusion due to insufficient validation in the filemanager plugin. An unauthenticated, remote attacker can exploit this, via a specially crafted POST request, to upload arbitrary files on the remote host. TRUSTED...
PT-2019-15283 · Asus · Asus Rog Zephyrus M Gm501Gs
Name of the Vulnerable Software and Affected Versions: ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 Description: The BIOS configuration design relies on the main battery, reducing the effectiveness of a protection mechanism that prohibits booting from a USB device. Attackers with physical...
CVE-2019-18216: Undefined Security Weakness
The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies on the main battery instead of using a CMOS battery, which reduces the value of a protection mechanism in which booting from a USB device is prohibited. Attackers who have physical laptop access can exhaust...
PT-2019-5267 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.9 Description: The issue is related to a memory leak in the crypto reportstat function, which can lead to a denial of service due to memory consumption. This can be triggered by causing copy from user...
Netskope Client Buffer Error Overflow Hole
Netskope Client is a client program for connecting to and managing the Netskope Cloud Platform from Netskope USA. A buffer error vulnerability exists in the 'doHandshakefromServer' function in Netskope Client versions 57 before 57.2.0.219 and 60 before 60.2.0.214. An attacker can exploit this...
