PT-2018-7241

Name of the Vulnerable Software and Affected Versions: ThreatMetrix SDK versions prior to 3.2 Description: The issue concerns the failure to validate SSL certificates provided by HTTPS connections, potentially allowing an attacker to perform a man-in-the-middle MITM attack. ThreatMetrix is a...

CVE-2017-3182: Improper Certificate Validation

On the iOS platform, the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections, which may allow an attacker to perform a man-in-the-middle MITM attack. ThreatMetrix is a security library for mobile applications, which aims to provide fraud preventi...

h-dragon-quest.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-646290 Description| Value ---|--- Affected Website:| h-dragon-quest.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Teradek T-RAX 7.3.2 (snapshot.cgi) Stream Disclosure

Summary T-RAX is a high-density enterprise-grade H.264 platform that encodes, decodes, and streams video at broadcast quality. Description T-RAX suffers from an unauthenticated and unauthorized live stream disclosure when snapshot.cgi script is called. Vendor Teradek, LLC - https://www.teradek.co...

Teradek Slice 7.3.15 (snapshot.cgi) Stream Disclosure

Summary Built on the award-winning Cube platform, Slice is a rack mount HEVC / H.264 codec designed to fit seamlessly into your broadcast studio. Like the Cube, Slice encoders and decoders includes 3G-SDI and HDMI I/O, Ethernet and WiFi connectivity, and full duplex IFB. Description Slice suffers...

USN-3690-1 amd64-microcode update

Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. This update provide...

Thinwire+ Support for H.264 Build-To-Lossless for transient content.

Introduction One of the features of Thinwire+ is “build to lossless” for transient content. This means that content such as3D or other moving imageryis initially displayed at low quality to improve frame rates and overall interactivity. Once user input has stopped, transient images are gradually...

Easy File Uploader 1.7 Shell Upload

==================================================================================================================================== | Title : Easy File Uploader 1.7 unrestricted file upload Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 FranASSais V.Pro...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1375-1) (Spectre)

The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Variant 4' bnc1087082. A new boot...

Teradek T-RAX 7.3.2 (snapshot.cgi) Stream Disclosure

Teradek T-RAX 7.3.2 snapshot.cgi Stream Disclosure Vendor: Teradek, LLC Product web page: https://www.teradek.com Affected version: Firmware Version: 7.3.2 build 24453 Teradek Firmware Version 7.3.15 Summary: T-RAX is a high-density enterprise-grade H.264 platform that encodes, decodes, and strea...

Teradek T-RAX 7.3.2 (snapshot.cgi) Stream Disclosure

Summary T-RAX is a high-density enterprise-grade H.264 platform that encodes, decodes, and streams video at broadcast quality. Description T-RAX suffers from an unauthenticated and unauthorized live stream disclosure when snapshot.cgi script is called. Teradek T-RAX 7.3.2 snapshot.cgi Stream...

UBUNTU-CVE-2018-10768

There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected...

CVE-2017-17258

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

Huawei H323 Protocol Denial of Service Vulnerability in Various Products

AR120-S, AR1200, DP300, RSE6500, Secospace USG6300, ViewPoint 8660 are all network equipment from Huawei China. A denial-of-service vulnerability exists in the H323 protocol of several Huawei products, which allows an attacker to send malformed messages to the affected device without authenticati...

h-travelz.nl XSS vulnerability

Open Bug Bounty ID: OBB-596738 Description| Value ---|--- Affected Website:| h-travelz.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

UBUNTU-CVE-2018-9272

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak...

KLA11220 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. A vulnenerability related to MP4 dissector can be exploited remotely via specially designed packet or packet...

RHEL 7 : collectd (RHSA-2018:0560)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0560 advisory. collectd is a small C-language daemon, which reads various system metrics periodically and updates RRD files creating them if necessary. Because the...

DLINK DCS-5020L - Remote Code Execution (PoC)

DLINK DCS-5020L - Remote Code Execution PoC “The DCS-5020L Wireless N Day & Night Pan/Tilt Cloud Camera is a day/night network camera that easily connects to your existing home network for remote viewing on a range of mobile devices. It features pan, tilt and digital zoom function to allow you to...

HPESBNS03827 rev.1 - HPE Nonstop Systems using NonStop SSL T0910, Local Unqualified Configuration Change

Potential Security Impact: Local: Unqualified Configuration Change SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop SSL T0910 L-Series: All versions prior to T0910L02^ABB; H-series and J-Series: All versions prior to T0910H01^ABD CVSS Scores: | CVE | CVSS Vector | Base Scor...