8066 matches found
Override access vulnerability in Kaixin helpdesk system
The Kaixin Helpdesk Helpdesk helps IT to collect the problems handled on a daily basis and generate reports to quantify the work. An override access vulnerability exists in the Qixing Helpdesk system, which can be exploited by an attacker to spoof the server side and achieve override operation...
CVE-2019-5293
Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal...
Design/Logic Flaw
Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal...
CVE-2019-5293
Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Tintin Tintin\+\+
PoC exploit for CVE-2008-0671. The target product/service is Windows SMB Server Message Block service. The vulnerability class/vector is RCE Remote Code Execution. The probable entry point is the NetAPI function in the Windows SMB service. Notable dependencies/tooling include Impacket and PyCrypt...
SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2946-1)
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception...
SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2953-1)
The SUSE Linux Enterprise 15-SP1 Azure Kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine...
CVE-2019-16707
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx...
HP Inkjet printers information disclosure vulnerability
HP Inkjet printers are an Inkjet series of printers from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Inkjet printers. The vulnerability arises from errors in the configuration of the networked system or in the operation of the product. The vulnerability can be...
Rockwellautomation Micrologix Unspecified Vulnerability
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...
Rockwellautomation Micrologix Unspecified Vulnerability
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...
Yokogawa Centum Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. File data ot500127.nasl...
EulerOS 2.0 SP5 : openssl110h (EulerOS-SA-2019-2218)
According to the versions of the openssl110h packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in th...
EulerOS 2.0 SP3 : openssl1.1.0f (EulerOS-SA-2019-2254)
According to the versions of the openssl1.1.0f packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some...
mc2SLut7w3AZ5Rq
A Remote Browser's Agent XSS is a piece of software that allows a remote "operator" to control a browser as if he has physical access to that system. While desktop sharing and remote administration have many legal uses, "XSS" software is usually associated with criminal or malicious activity...
Archos Safe-T Information Disclosure Vulnerability
Archos Safe-T is a hardware-based cryptocurrency wallet device. An information disclosure vulnerability exists in Archos Safe-T, which arises from errors such as configuration during operation of a networked system or product, and can be exploited by an unauthorized attacker to gain access to...
Siemens SCALANCE WLC711 6GK571-10XC00-1AB0 IWLAN Controller Detection
Binary data 765311.prm...
Chrome 0-day exploit CVE-2019-13720 used in Operation WizardOpium
Executive summary Kaspersky Exploit Prevention is a component part of Kaspersky products that has successfully detected a number of zero-day attacks in the past. Recently, it caught a new unknown exploit for Google's Chrome browser. We promptly reported this to the Google Chrome security team...
Google Discloses Chrome Flaw Exploited in the Wild
UPDATE Google is warning users of a high-severity vulnerability in its Chrome browser that is currently being exploited by attackers to hijack computers. The flaw CVE-2019-13720, discovered by security researchers Anton Ivanov and Alexey Kulaev at Kaspersky, exists in Google Chrome’s audio...