June 18, 2019—KB4501371 (OS Build 17763.592)

None None...

Node.js third-party modules: [min-http-server] Stored XSS in the filename when directories listing

I would like to report Stored XSS in module "min-http-server". It allows to inject malicious scripts in the file name, store them on the server, then execute these scripts in the browser via the XSS vulnerability. Module module name: min-http-server version: 1.0.6 npm page:...

Node.js third-party modules: [min-http-server] List any file in the folder by using path traversal.

I would like to report Path Traversal in min-http-server. It allows to list any file in another folder of web root. Module module name: min-http-server version: 1.0.6 npm page: https://www.npmjs.com/package/min-http-server Module Description 'min-http-server' is a zero-configuration, lightweight...

kernel: Faulty computation of numberic bounds in the BPF verifier

A security flaw was found in the Linux kernel in the adjustscalarminmaxvals function in kernel/bpf/verifier.c. A faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because this function mishandles 32-bit right shifts. A local unprivileged user cannot...

DEBIAN-CVE-2019-8426

skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControlMinTiltRange parameter...

DEBIAN-CVE-2018-18445

In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjustscalarminmaxvals in kernel/bpf/verifier.c mishandles 32-bit right shifts...

UBUNTU-CVE-2018-18445

In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjustscalarminmaxvals in kernel/bpf/verifier.c mishandles 32-bit right shifts...

acesso.ivv.min-agricultura.pt XSS vulnerability

Open Bug Bounty ID: OBB-654863 Description| Value ---|--- Affected Website:| acesso.ivv.min-agricultura.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

min-funabashi.jp XSS vulnerability

Open Bug Bounty ID: OBB-599999 Description| Value ---|--- Affected Website:| min-funabashi.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

min-com.com XSS vulnerability

Vulnerable URL: https://www.min-com.com/brockville-real-estate-listings.php?command=view=13" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10898401 VIP website status:| No Coordinated Disclosure Timeline:...

Heap-buffer-overflow in find_minlength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4881488118022144 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x614000002c33 Crash State:...

min-vinkaelder.dk XSS vulnerability

Open Bug Bounty ID: OBB-182484 Description| Value ---|--- Affected Website:| min-vinkaelder.dk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

USN-3045-1 php5, php7.0 vulnerabilities

It was discovered that PHP incorrectly handled certain SplMinHeap::compare operations. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2015-4116 ...

The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.

The vulnerability of the splptrheapinsert function ext/spl/splheap.c in the PHP interpreter is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by invoking the faulty operation of SplMinHeap::compare...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures

The vulnerability of the LISTPOISON function include/linux/poison.h in the kernel is related to errors in handling the mmapminaddr variable. Exploiting this vulnerability allows a remote attacker to bypass security measures by calling an uninitialized list of entries...

DEBIAN-CVE-2016-0821

The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmapminaddr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the...

UBUNTU-CVE-2016-0821

The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmapminaddr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the...

Exploit for Improper Input Validation in Linux Linux_Kernel

Exploit for CVE-2017-5123 Step Complile kernel with null...

Information Disclosure and Arbitrary File Upload Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is a comprehensive enterprise-level data integration application system developed by UFIDA Software Co. The UFIDA NC-IUFO Reporting System suffers from an information disclosure and arbitrary file upload vulnerability, which allows an attacker to exploit this...

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes. Shellcode exploit for linuxmips platform include / Title: Linux/MIPS Little Endian - chmod 666 /etc/passwd - 55 bytes Date: 2015-03-05 Author: Sang-Min LEE Email: [email protected] Blog: http://smleenull.tistory.com / char sc =...