4563 matches found
CVE-2019-17590: Cross-Site Request Forgery (CSRF)
The csrfcallback function in the CSRF Magic library through 2016-03-27 is vulnerable to CSRF protection bypass as it allows one to tamper with the csrf token values. A remote attacker can exploit this by crafting a malicious page and dispersing it to a victim via social engineering, enticing them...
CVE-2012-1109
mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing iferror magic functions...
CVE-2012-1109
CVE-2012-1109 affects mwlib versions 0.13 through 0.13.4, which contain a denial-of-service vulnerability in the parser when handling #iferror magic functions. The vulnerability is documented across multiple sources (NVD, CVE lists, and related records) and is classified with a MEDIUM to HIGH imp...
PT-2019-6734
Name of the Vulnerable Software and Affected Versions mwlib versions 0.13 through 0.13.4 Description The issue is related to a denial of service vulnerability that occurs when parsing iferror magic functions. Recommendations For mwlib versions 0.13 through 0.13.4, update to a version that contain...
DRUPAL-CONTRIB-2019-075
Open Social is a Drupal distribution for online communities. The included social\magic\login module doesn't sufficiently validate magic login URLs for user accounts that do not have a local password, but login via external systems. The lack of validation makes it possible for an adversary to forg...
PT-2019-20411
Open Social is a Drupal distribution for online communities. The included social magic login module doesn't sufficiently validate magic login URLs for user accounts that do not have a local password, but login via external systems. The lack of validation makes it possible for an adversary to forg...
Gartner names Microsoft a Leader in the 2019 Cloud Access Security Broker (CASB) Magic Quadrant
In Gartner’s third annual Magic Quadrant for Cloud Access Security Brokers CASB, Microsoft was named a Leader based on its completeness of vision and ability to execute in the CASB market. Microsoft was also identified as strongest in execution. Gartner led the industry when they defined the term...
Stealthy Microsoft SQL Server Backdoor Malware Spotted in the Wild
Cybersecurity researchers claim to have discovered a previously undocumented backdoor specifically designed for Microsoft SQL servers that could allow a remote attacker to control an already compromised system stealthily. Dubbed Skip-2.0 , the backdoor malware is a post-exploitation tool that run...
Heap overflow
Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...
CVE-2019-2294
Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...
CVE-2019-2294
CVE-2019-2294 relates to a vulnerability in Qualcomm Snapdragon components where a hard-coded magic number is used to calculate heap guard bytes. This can allow an attacker to corrupt heap blocks without understanding the heap’s algorithm, affecting a wide range of Snapdragon-based products (Auto...
CVE-2019-2294: Use of Insufficiently Random Values
Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...
PT-2019-16364
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9205 through MDM9655 Qualcomm Snapdragon Compute versions MDM9205 through MDM9655 Qualcomm Snapdragon Connectivity versions MDM9205 through MDM9655 Qualcomm Snapdragon Consumer Electronics Connectivity...
A Leader in the 2019 Gartner Magic Quadrant for WAF, Six Years Running
Gartner has published its 2019 Gartner Magic Quadrant for Web Application Firewalls WAF and Imperva has been named a Leader for the sixth consecutive year! Along with our WAF Gateways and easy-to-deploy Cloud WAF we recently added API Security, RASP, Account Takeover Protection, Bot Management, a...
Magic AirMusic Detection (HTTP)
The script sends a HTTP request to the remote host and attempts to detect the presence of a Magic AirMusic device. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
WordPress magic-fields plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress magic-fields plugin cross-site scripting vulnerability (CNVD-2019-32372)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress magic-fields plugin cross-site scripting vulnerability (CNVD-2019-32383)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...