VMSA-2018-0007:VMware Virtual Appliance updates address side-channel analysis due to speculative execution

VMSA-2018-0007.6 VMware Virtual Appliance updates address side-channel analysis due to speculative execution VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0007.6 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Virtual Appliance...

WordPress Core - load-scripts.php Denial of Service

WordPress Core - load-scripts.php Denial of Service EDB Note: python doser.py -g...

Software Defined Radio Attack Tool: RFCrack

RFCrack is my personal RF test bench, it was developed for testing RF communications between any physical device that communicates over sub Ghz frequencies. IoT devices, Cars, Alarm Systems etc… Testing was done with the Yardstick One on OSX, but RFCrack should work fine in linux. Current support...

Huawei TripAdvisor Catwalk App Loads Arbitrary URL Vulnerability

TripAdvisor offers a wealth of travel planning and booking features, as well as powerful offline downloads and local services, making it a "must-have" tool for your outbound travel. A load arbitrary URL vulnerability exists in the Huawei TripAdvisor Catwalk application due to insufficient paramet...

CVE-2018-6398

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...

CVE-2018-6395

SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action...

GoAhead Web Server 2.5 < 3.6.5 - HTTPd LD_PRELOAD Arbitrary Module Load Exploit

This Metasploit module triggers an arbitrary shared library load vulnerability in GoAhead web server versions between 2.5 and that have the CGI module enabled. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Apache NiFi Sensitive Information Disclosure Vulnerability

Apache NiFi is a data streaming based data processing and distribution system. A security vulnerability in Apache NiFi's handling of HTTP requests allows remote attackers to exploit the vulnerability by submitting a special request to load NiFi to load resources from an external server...

GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Arbitrary Module Load (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GoAhead Web Server LDPRELOAD Arbitrary Module Load', 'Description' = %q This module triggers an arbitrary shared library load vulnerability in...

The vulnerability of the post_load function in the QEMU hardware-emulation driver’s hw/input/ps2.c file allows a hacker to perform out-of-buffer reading operations in dynamic memory.

The vulnerability of the postload function in the QEMU hardware-emulation emulator’s hw/input/ps2.c file is related to incorrect validation of input data. Exploiting this vulnerability allows a remote attacker to perform out-of-buffer read operations on dynamic memory...

GoAhead Web Server LD_PRELOAD Arbitrary Module Load

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GoAhead Web Server LDPRELOAD Arbitrary Module Load', 'Description' = %q This module triggers an arbitrary shared library load vulnerability in...

[SECURITY] Fedora 27 Update: bind-dyndb-ldap-11.1-8.fc27

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

OpenJDK: GTK library loading use-after-free (AWT, 8185325)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

Microsoft Edge Chakra JIT Loop Analysis Bug

Microsoft Edge: Chakra: JIT: Loop analysis bug CVE-2018-0777 Here's the PoC demonstrating OOB write. function optarr, start, end for let i = start; i end; i++ if i === 10 i += 0; // -- a arri = 2.3023e-320; function main let arr = new Array100; arr.fill1.1; for let i = 0; i 1000; i++ optarr, 0, 3...

Kentico CMS 11.0 - Buffer Overflow

Kentico CMS 11.0 - Buffer Overflow Document Title: =============== Kentico CMS v11.0 - Stack Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1943 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5282 CVE-ID: =======...

Kentico CMS 11.0 - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Document Title: =============== Kentico CMS v11.0 - Stack Buffer Overflow Vulnerability CVE-ID: ======= CVE-2018-5282 Vulnerability Class: ==================== Buffer Overflow Current Estimated Price: ======================== 2.000€ - 3.000€...

Kentico Load XML Configuration Module Buffer Overflow Vulnerability

Kentico is the United States Kentico Software Corporation's set of ASP.NET-based content management system CMS. Kentico CMS Controls is used to edit and control a variety of elements in the web page . Load XML Configuration moudle is one of the XML upload configuration module . A stack buffer...

PT-2018-5777 · Freedesktop.Org +4 · Xdg-User-Dirs +4

Name of the Vulnerable Software and Affected Versions: xdg-user-dirs versions prior to 0.15.5 Description: A issue was found where the system umask policy is not being honored when creating XDG user directories. This occurs because Xsession sources xdg-user-dirs.sh before setting the umask policy...

CVE-2017-15883

Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via vectors related to weak cryptography...

OracleVM 3.4 : microcode_ctl (OVMSA-2018-0003)

The remote OracleVM system is missing necessary patches to address critical security updates : - Enable early microcode load to allow updating Broadwell model 79 - Make sure 'modprobe microcode' is not executed on Broadwell model 79 - Run dracut upon microcode update - Update Intel CPU microde fo...