844 matches found
CVE-2019-10787: Improper Neutralization of Special Elements used in an OS Command
im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization...
CVE-2019-10788: Improper Neutralization of Special Elements used in an OS Command
im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function...
fritz-im-pyjama.de Cross Site Scripting vulnerability
Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting fritz-im-pyjama.de website and its users. Following...
PT-2020-15278 · Libvips +3 · Libvips +3
Name of the Vulnerable Software and Affected Versions: libvips versions prior to 8.8.2 Description: The issue is related to an uninitialized variable in the im vips2dz function, located in /libvips/libvips/deprecated/im vips2dz.c. This may cause the leakage of the remote server path or stack...
Liverpool Voyeur Used IM-RAT to Video Women at Home
Scott Crowley. A 27-year-old Liverpool, England man has been convicted on charges of computer misuse after admitting to installing the remote-access trojan RAT known as Imminent Monitor on three unsuspecting women’s devices. The defendant, Scott Crowley, said in a court hearing that he used...
Europol Shuts Down 'Imminent Monitor' RAT Operations With 13 Arrests
In a coordinated International law enforcement operation, Europol today announced to shut down the global organized cybercrime network behind Imminent Monitor RAT, yet another hacking tool that allows cybercriminals to gain complete control over a victim's computer remotely. The operation targete...
The vulnerability in the web interface for managing Cisco Unified Communications Manager systems, including Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, and the integrated messaging system Cisco Unity Connection, allows a perpetrator to send arbitrary requests.
The vulnerability of the Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, and the integrated messaging system Cisco Unity Connection’s web interfaces is related ...
PT-2019-3812
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager SME versions affected versions not specified Unified Communications Manager IM and Presence Service versions affected versions n...
CVE-2019-1915: Cross-Site Request Forgery (CSRF)
A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, and Cisco Unity Connection could allow an unauthenticated, remote...
PT-2019-4212
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.11 Description A memory leak in the bfad im get stats function allows attackers to cause a denial of service by triggering bfa port get stats failures. This issue is related to an uncontrolled resource...
voelklingen-im-wandel.de Improper Access Control vulnerability
Open Bug Bounty ID: OBB-981309 Security Researcher k0t Helped patch 2160 vulnerabilities Received 9 Coordinated Disclosure badges Received 101 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting voelklingen-im-wandel.de websi...
Debian: Security Advisory (DSA-4524-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4524-1] dino-im security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4524-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2019 https://www.debian.org/security/faq -...
DSA-4524-1 dino-im - security update
Bulletin has no description...
weihnachten-im-web.de Cross Site Scripting vulnerability
Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting weihnachten-im-web.de website and its users. Following...
Siemens SIMATIC ET 200AL PROFIBUS Interface Module IM 157-1 DP
Binary data 764632.prm...
Remote code execution
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
CVE-2019-1845: Improper Input Validation
A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, Cisco TelePresence Video Communication Server VCS, and Cisco Expressway Series could allow an unauthenticated, remote attacker to cause a service outage for users...
PT-2019-2343
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service affected versions not specified Cisco TelePresence Video Communication Server affected versions not specified Cisco Expressway Series affected versions not specified Description A...