140 matches found
oliverharvey.co.uk Improper Access Control vulnerability OBB-1239308
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unbreakable Enterprise kernel security update
4.1.12-124.36.1.1 - KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton Orabug: 30847137 CVE-2020-2732 - KVM: nVMX: Refactor IO bitmap checks into helper function Oliver Upton Orabug: 30847137 CVE-2020-2732 - KVM: nVMX: Dont emulate instructions in guest mode Paolo Bonzini Orabug:...
Unbreakable Enterprise kernel security update
4.14.35-1902.10.8 - KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton Orabug: 30847136 CVE-2020-2732 - KVM: nVMX: Refactor IO bitmap checks into helper function Oliver Upton Orabug: 30847136 CVE-2020-2732 - KVM: nVMX: Dont emulate instructions in guest mode Paolo Bonzini Orabug:...
Snowden’s Attorney Talks Govt Harrassment of Whistleblower Helpers (Part One)
Human rights lawyer Robert Tibbo represented former N.S.A. contractor-turned-whistleblower Edward Snowden when he fled the United States to Hong Kong in 2013. Less publicized has been Tibbo’s work representing several families from the Hong Kong refugee community that welcomed Snowden into their...
‘Snowden Refugee’ Has No Regrets for Helping Whistleblower
LEIPZIG, GERMANY – Refugee families located in Hong Kong that helped shelter Edward Snowden in 2013 are under crushing pressure to cooperate with local authorities or face deportation to their countries of origin, where they face an uncertain fate. However, despite years of what their lawyer call...
CVE-2014-2710
Multiple cross-site scripting XSS vulnerabilities in Oliver formerly Webshare 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the 1 login page index.php or 2 login form loginform-inc.php...
CVE-2014-2710
Multiple cross-site scripting XSS vulnerabilities in Oliver formerly Webshare 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the 1 login page index.php or 2 login form loginform-inc.php...
CVE-2014-2710
CVE-2014-2710 affects Oliver (formerly Webshare) up to version 1.3.1. The vulnerability is non-persistent XSS via PATH_INFO on the login endpoints (index.php and loginform-inc.php). Root cause: input handling/validation flaw on login pages leading to script/HTML injection. Impact per sources incl...
Oliver Cross-Site Scripting Vulnerability
Oliver formerly known as Webshare is a set of WebFTP resource manager using Ajax and PHP development . A cross-site scripting vulnerability exists in Oliver version 1.3.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...
Oliver 1.3.0 / 1.3.1 Cross Site Scripting
Advisory Information Title: Multiple Reflected XSS vulnerabilities in Oliver formerly Webshare v1.3.1 Date published: 2016-15-04 Date of last update: 2014-03-04 Vendors contacted: Oliver formerly Webshare v1.3.1 Discovered by: Rv3Laboratory Research Team Severity: Medium 02. Vulnerability...
November 2015 Android Security Bulletin
The Stagefright vulnerabilities are the gifts that keep on giving. Months after the potentially devastating security flaws in the mobile OS were publicly disclosed, Google continues to send out patches addressing vulnerabilities related to the initial reports. Today’s monthly Android security...
Podcast: Apple Patches, John Olver, Ed Snowden and More
Dennis Fisher and Mike Mimoso discuss the big Apple news from the week, Cisco and L3 crushing some SSH attacks, the great John Oliver interview of Edward Snowden and the dwindling days before RSA. Download: digitalunderground194.mp3 Music by Chris Gonsalves...
F5 Big-IP 11.3.0.39.0 XML External Entity Injection #1
Vulnerability title: XML External Entity Injection in F5 Networks Big-IP CVE: CVE-2014-6032 Vendor: F5 Networks Product: Big-IP Affected version: 11.3.0.39.0 Fixed version: N/A Reported by: Oliver Gruskovnjak Details: F5 Networks Big-IP is vulnerable to an XML External Entity injection attack. Th...
Oliver Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24754/info Oliver is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser ...
CVE-2014-5880 - Authentication Bypass in Oracle Demantra
Vulnerability title: Authentication Bypass in Oracle Demantra CVE: CVE-2014-5880 Vendor: Oracle Product: Demantra Affected version: 12.2.1 Fixed version: 12.2.3 Reported by: Oliver Gruskovnjak Details: The authentication filter in Oracle Demantra is broken by design. For example the page:...
A vulnerability in extension Drag Drop Mass Upload (ameos_dragndropupload)
A vulnerability has been found in the following third-party TYPO3 extension: ameosdragndropupload Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.0.2 and below Vulnerability Types: Arbitrary Code Execution Severit...
Ubuntu Update for linux USN-1168-1
Ubuntu Update for Linux kernel vulnerabilities USN-1168-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11681.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1168-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
Ubuntu Update for linux-ec2 USN-1161-1
Ubuntu Update for Linux kernel vulnerabilities USN-1161-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11611.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-ec2 USN-1161-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...
Ubuntu 10.04 LTS : linux vulnerabilities (USN-1168-1)
Timo Warns discovered that the LDM disk partition handling code did not correctly handle certain values. By inserting a specially crafted disk device, a local attacker could exploit this to gain root privileges. CVE-2011-1017 Neil Horman discovered that NFSv4 did not correctly handle certain orde...
USN-1168-1: Linux kernel vulnerabilities
Timo Warns discovered that the LDM disk partition handling code did not correctly handle certain values. By inserting a specially crafted disk device, a local attacker could exploit this to gain root privileges. CVE-2011-1017 Neil Horman discovered that NFSv4 did not correctly handle certain orde...