2377 matches found
PT-2019-5609 ¡ Linux +2 ¡ Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions up to 3.10 Description: A denial of service situation can be created by an attacker with local access via a NULL pointer dereference in the ovl posix acl create function in fs/overlayfs/dir.c. This allows attackers who c...
OPENSUSE-SU-2019:0095-1 Security update for singularity
This update for singularity to version 2.6.1 fixes the following issues: Security issues fixed: - CVE-2018-19295: Mount points are not mounted with shared mount propagation by default anymore, as this may result in privilege escalation boo1111411. - CVE-2018-12021: Fixed a incorrect access contro...
Security update for singularity (moderate)
openSUSE Security Update: Security update for singularity Announcement ID: openSUSE-SU-2019:0095-1 Rating: moderate References: 1100333 1111411 Cross-References: CVE-2018-12021 CVE-2018-19295 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 An update that fixes two vulnerabilities...
Denial Of Service (DoS)
openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request,...
Fedora 28 : singularity (2018-d7125c3900)
This is a straightforward update from 2.5.1 to the newly-released 2.5.2. Release notes are here : https://github.com/singularityware/singularity/releases/tag/2.5.2 The most important fix is a security issue in the overlay code. Please look for regressions in your Singularity runtime workflows. No...
Android Trojan Targets PayPal Users
Want to download an Android battery utility app from a third-party Android app store? What could possibly go wrong? Last month researchers downloaded a power management app called âOptimization Androidâ from an undisclosed third-party app store. What they found was instead of optimizing the phone...
CVE-2018-9524
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
Design/Logic Flaw
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
CVE-2018-9524
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
CVE-2018-9524
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
CVE-2018-9524: Improper Restriction of Rendered UI Layers or Frames
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
PT-2018-19028
Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 8.1 Description The issue is related to insufficient protections around overlay windows in the System UI functionality. This could lead to local escalation of privilege without needing additional execution...
ANDRAX - The First And Unique Penetration Testing Platform For Android Smartphones
ANDRAX The first and unique Penetration Testing platform for Android smartphones What is ANDRAX ANDRAX is a penetration testing platform developed specifically for Android smartphones, ANDRAX has the ability to run natively on Android so it behaves like a common Linux distribution, But more...
Zero Trust Security Architectures - Software Defined Perimeter
By Jano van Deventer and Andrew Terranova This is Part 3 of a 5 part blog series. Jump to Part 1: Introduction Jump to Part 2: Network Micro-Segmentation Jump to Part 4: Identity Aware Proxy Jump to Part 5: Akamai's Approach to Zero Trust Introduction In the first part of this blog series, we...
UBUNTU-CVE-2018-16597
An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem...
UNL-CMS Cross-Site Request Forgery Vulnerability
UNL-CMS is a PHP-based content management system. A cross-site request forgery vulnerability exists in UNL-CMS version 7.59, which can be exploited by a remote attacker to create new content with the help of ?q=node%2Fadd%2Farticle&render=overlay&render=overlay URL...
CVE-2018-17069
An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay...
PT-2018-13874
Name of the Vulnerable Software and Affected Versions UNL-CMS version 7.59 Description An issue was discovered that allows a CSRF attack to create new content. The attack can be performed via the API endpoint "/node/add/article" with specific parameters, including "render=overlay". Recommendation...
August 30, 2018âKB4346783 (OS Build 17134.254)
None None...
Shopify: App messaging can be hijacked by third-party websites
The JavaScript code at https://cdn.shopify.com/s/assets/admin/index-c6e72fa910cd0182ab1d1e67ff823fb2e6ca61745c00797769410ce01aafc4d8.js installs a message event listener to receive messages from installed apps when these apps are displayed in a frame. The following check rejects invalid event...