10731 matches found
jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the c3p0 gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or Id.MINIMALCLASS ...
unzip: overlapping of files in ZIP container leads to denial of service
Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service resource consumption, aka a "better zip bomb" issue...
PT-2020-8504 · Adns +2 · Adns +2
Name of the Vulnerable Software and Affected Versions: adns versions prior to 1.5.2 Description: An issue was discovered in adns where adns rr info mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer, which can be overrun if the input is ou...
CVE-2020-4045
SSB-DB 20.0.0 contains an information-disclosure vulnerability in the get() method that can decrypt any decryptable message and return private data. The issue affects peers with private messages, and exploitation is tied to SSB-OOO (default in SSB-Server), which exposes a wrapper around get() to ...
CVE-2020-0134
In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...
CVE-2020-0212
In onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android...
CVE-2020-0200
CVE-2020-0200 is an Android 10 issue affecting the Media Framework: a missing bounds check in ReadLittleEndian within raw_bit_reader.cc can trigger an out-of-bounds read and information disclosure. The NVD entry notes network access as the attack vector with no execution privileges, while the CVS...
UBUNTU-CVE-2020-10755
An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleI...
CVE-2020-13830
Technical details are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2020-13804
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin...
CVE-2020-7030
Avaya IP Office web interface is affected by CVE-2020-7030. Affected: IP Office components 9.x, 10.0–10.1.0.7, and 11.0–11.0.4.3. The vulnerability is a sensitive information disclosure due to issues in the web interface, with exploitation demonstrated via insecure transit/password disclosure (no...
Sophisticated Info-Stealer Targets Air-Gapped Devices via USB
The Cycldek APT group has added a previously unknown malware dubbed USBCulprit to its arsenal, aimed at reaching air-gapped devices. Cycldek a.k.a. Goblin Panda, APT 27 and Conimes has been targeting governments in Southeast Asia since 2013, according to analysis from Kaspersky, and has been...
h1-ctf: [H1-2006 2020] 36 hours of brain cycles utilized on solving a neat puzzle
Here we go: F852423 Recon: The given scope is: .bountypay.h1ctf.com Found subdomains: bountypay.h1ctf.com api.bountypay.h1ctf.com app.bountypay.h1ctf.com software.bountypay.h1ctf.com staff.bountypay.h1ctf.com www.bountypay.h1ctf.com Relevant GitHub repository:...
AdRotate < 5.8.4 - Authenticated SQL Injection
Authenticated SQL injection in the AdRotate 5.8.3.1 exists via param "id". However, this requires an admin privileged user. NOTE: The plugin author mistook this SQLi bug for XSS but the remedy remains OK. PoC Param "id" is vulneable to SQL Injeciton. Example 1:...
Inshackle - Instagram Hacks: Track Unfollowers, Increase Your Followers, Download Stories, Etc
Instagram hacks: Track unfollowers, Increase your followers, Download Stories, etc Features: Unfollow Tracker Increase Followers Download: Stories, Saved Content, Following/followers list, Profile Info Unfollow all your following Usage: git clone https://github.com/thelinuxchoice/inshackle cd...
nashvilleareainfo.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181589 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Exploit for Out-of-bounds Write in Php
This is an exploit module for a bug in php-fpm CVE-2019-11043. The bug is possible to trigger from the outside in certain nginx + php-fpm configurations, allowing a web user to execute code if the vulnerable configuration is present. The exploit targets PHP 7+ and works by appending a specially...
info-grad.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1180966 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2014-8938
Lexiglot (up to 2014-11-20) is affected by an information-disclosure vulnerability where local users can obtain usernames and passwords by listing a process, due to credentials being exposed on the command line. Root cause: credentials present on the command line. Impact is a local confidentialit...
bat (0.18.0), buffett-core (>=0.1.0, <=0.1.1) +74 more potentially affected by CVE-2020-36434 via sys-info (>=0.4.1, <=0.7.0)
sys-info CARGO version =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.3.0, =0.29.0, =0.20.0, =0.1.0, =0.1.0, =1.3.0, =1.8.0, =0.7.0, =0.7.0, =0.31.2 and more Source cves: CVE-2020-36434 Source advisory: OSV:RUSTSEC-2020-0100...