SQL Injection Vulnerability in Heybbs 1.2 re***.php File

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs 1.2 re.php file, which can be exploited by attackers to obtain database information...

Important: Red Hat Security Advisory: java-1.7.0-openjdk security update

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 6 : java-1.8.0-openjdk (RHSA-2020:1506)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1506 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

re-elko.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1142825 Security Researcher Hchabik Helped patch 2461 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting re-elko.com website and its...

Missing memory barriers in read-write unlock paths

ISSUE DESCRIPTION The read-write unlock paths don't contain a memory barrier. On Arm, this means a processor is allowed to re-order the memory access with the preceding ones. In other words, the unlock may be seen by another processor before all the memory accesses within the "critical" section. ...

Privilege escalation

A privilege escalation vulnerability in Juniper Networks QFX10K Series, EX9200 Series, MX Series, and PTX Series with Next-Generation Routing Engine NG-RE, allows a local authenticated high privileged user to access the underlying WRL host. This issue only affects QFX10K Series with NG-RE, EX9200...

CVE-2020-1619 Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.

A privilege escalation vulnerability in Juniper Networks QFX10K Series, EX9200 Series, MX Series, and PTX Series with Next-Generation Routing Engine NG-RE, allows a local authenticated high privileged user to access the underlying WRL host. This issue only affects QFX10K Series with NG-RE, EX9200...

CVE-2020-1619

CVE-2020-1619 describes a local privilege-escalation in Juniper Junos OS NG-RE on QFX10K, EX9200, MX and PTX Series with vmhost. Affected software includes Junos OS releases up to the listed versions prior to 16.1R7-S6, 16.2R2-S11, 17.1R2-S11/17.1R3, 17.2R1-S9/17.2R3-S3, 17.3R2-S5/17.3R3-S7, 17.4...

PT-2020-4137

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 14.1X53 through 14.1X53-D52 on EX4300 Juniper Networks Junos OS versions 15.1 through 15.1R7-S5 on EX4300 Juniper Networks Junos OS versions 15.1X49 through 15.1X49-D199 on EX4300 Juniper Networks Junos OS...

Woocommerce Subscriptions < 3.0.3 - CSRF to Cancel/Re-Activate Subscription

During a blog assessment, we identified a CSRF issue in the Woocommerce Subscriptions plugin, which could allow attackers to cancel and re-activate a logged in user's subscription. Even though the wpnonce parameter was needed in the request, its value was not verified, allowing an empty value to ...

Woocommerce Subscriptions < 3.0.3 - CSRF to Cancel/Re-Activate Subscription

During a blog assessment, we identified a CSRF issue in the Woocommerce Subscriptions plugin, which could allow attackers to cancel and re-activate a logged in user's subscription. Even though the wpnonce parameter was needed in the request, its value was not verified, allowing an empty value to ...

Wing FTP Server 6.2.3 Cross Site Request Forgery Vulnerability

Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation Exploit Author: Dhiraj Mishra Vendor Homepage: https://www.wftpserver.com Version: v6.2.6 Tested on: Windows 10 Summary: An authenticated CSRF exists in web client and web administration of Wing FTP v6.2.6, a crafted HTML page could dele...

openSUSE Security Update : python-azure-agent (openSUSE-2020-261)

This update for python-azure-agent fixes the following issues : python-azure-agent was updated to version 2.2.45 jscECO-80 + Add support for Gen2 VM resource disks + Use alternate systemd detection + Fix /proc/net/route requirement that causes errors on FreeBSD + Add cloud-init auto-detect to...

Fedora: Security Advisory for cutter-re (FEDORA-2020-4a3ff78ba5)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cutter-re (FEDORA-2020-acd8cdb08d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 30 : cutter-re / radare2 (2020-4a3ff78ba5)

Rebase to radare2-4.2.1 and cutter-re 1.10.1. It fixes CVE-2019-19590 and CVE-2019-19547. It also fix a problem in cutter-re that did not display the window icon on Wayland. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Fedora 31 : cutter-re / radare2 (2020-acd8cdb08d)

Rebase to radare2-4.2.1 and cutter-re 1.10.1. It fixes CVE-2019-19590 and CVE-2019-19547. It also fix a problem in cutter-re that did not display the window icon on Wayland. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Stored Cross-site Scripting Vulnerability in Tuan Ah VIP Movie System re***.php File

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A stored cross-site scripting vulnerability exists in the re.php file of the Tuan Ah VIP Movie System. An attacker can insert malicious js code into the page to obtain user cookies and other...

Android Trojan xHelper uses persistent re-infection tactics: here’s how to remove

We first stumbled upon the nasty Android Trojan xHelper, a stealthy malware dropper, in May 2019. By mid-summer 2019, xHelper was topping our detection charts—so we wrote an article about it. After the blog, we thought the case was closed on xHelper. Then a tech savvy user reached out to us in...

SQL injection vulnerability in the re***.php file of the VIP movie system of Tuan ah (CNVD-2020-15067)

Group ah VIP movie system is a set of registered members with proxy version of the VIP movie video watching website source code. There is a SQL injection vulnerability in the re.php file. Attackers can use the vulnerability to obtain sensitive information in the database...