CVE-2019-14237

The CVE concerns NXP Kinetis KV1x, KV3x, and K8x devices where Flash Access Controls (FAC) execute-only protection can be defeated by observing CPU registers and the effects of code execution. The impact is the circumvention of execute-only protection as described; no specific remediation or patc...

PT-2019-13551

Name of the Vulnerable Software and Affected Versions STMicroelectronics STM32L0 version affected versions not specified STMicroelectronics STM32L1 version affected versions not specified STMicroelectronics STM32L4 version affected versions not specified STMicroelectronics STM32F4 version affecte...

PT-2019-13552

Name of the Vulnerable Software and Affected Versions NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices affected versions not specified Description The issue concerns the Flash Access Controls FAC method, which is a software IP protection technique for execute-only access. It can be bypasse...

Design/Logic Flaw

cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...

CVE-2017-13095

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property IP, as well as the management of access rights for such IP, including modification of a license-deny response to a license grant. The methods are flawed and, in the most egregious cases, enable...

Weblate: Rate Limit Bypass on login Page

Hi, Your web authentication endpoint, https://demo.weblate.org/accounts/login/ POST, currently protects against credentials brute-force attacks only by requests rate-limiting based on IP. It was found that if an attacker sends login requests faster than every 4 seconds from the same IP address, i...

FreeBSD : mediawiki -- multiple vulnerabilities (6241b5df-42a1-11e5-93ad-002590263bf5)

MediaWiki reports : Internal review discovered that Special:DeletedContributions did not properly protect the IP of autoblocked users. This fix makes the functionality of Special:DeletedContributions consistent with Special:Contributions and Special:BlockList. Internal review discovered that...

mediawiki -- multiple vulnerabilities

MediaWiki reports: Internal review discovered that Special:DeletedContributions did not properly protect the IP of autoblocked users. This fix makes the functionality of Special:DeletedContributions consistent with Special:Contributions and Special:BlockList. Internal review discovered that...

xpoll-upload.txt

X-Poll Directory Traversal Vulnerability&Arbitrary File Upload By: e.wiZz! Site: madspot.org Info: Zeljko Komsic please kill your self and other 2 plz. In the wild: -------------------------- X-Poll Version 2.0 allows you to create polls with unlimited options which have their own start and expir...