5883 matches found
USN-4051-1 apport vulnerability
Kevin Backhouse discovered a race-condition when reading the user's local Apport configuration. This could be used by a local attacker to cause Apport to include arbitrary files in a resulting crash report...
FreeBSD : python 3.6 -- multiple vulnerabilities (18ed9650-a1d6-11e9-9b17-fcaa147e860e)
Python changelog : bpo-35907: CVE-2019-9948: Avoid file reading by disallowing local-file:// and localfile:// URL schemes in URLopener.open and URLopener.retrieve of urllib.request. bpo-36742: Fixes mishandling of pre-normalization characters in urlsplit. bpo-30458: Address CVE-2019-9740 by...
CVE-2019-13358
lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format...
CVE-2018-14865
The CVE-2018-14865 case concerns Odoo, specifically the Report engine in Odoo Community versions 9.0–11.0 and earlier and Odoo Enterprise versions 9.0–11.0 and earlier. The vulnerability stems from the Report engine not using secure options when passing documents to wkhtmltopdf, which can allow a...
Odoo Permission License and Access Control Issues Vulnerability
Odoo is an open source commercial system from the Belgian company Odoo. A privilege-permission and access-control issue vulnerability exists in the module-description renderer in Odoo 11.0 and earlier versions Community and Enterprise, which can be exploited by an attacker to read local files...
UBUNTU-CVE-2019-5810
Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
The vulnerability of the getLoginInformation function at address 0x175798 in the SMC handler for the GLOBAL_CMD_ID_OPEN_SESSION function of the TEE OS in the Huawei Mate 9 Pro mobile phone’s microprogramming system. This vulnerability allows an attacker to cause a service failure or to read the virtual memory of the TEE OS at arbitrary addresses.
The vulnerability of the getLoginInformation function at address 0x175798 in the SMC handler for the GLOBALCMDIDOPENSESSION function in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone’s microprogramming system is related to the lack of validation for the incoming physical address...
Uber: Arbitrary File Reading on Uber SSL VPN
The hacker has found a series of 0 day related to Pulse Secure SSL VPN...
The vulnerability of the microprogrammed programmable logic controller Modicon, related to reading buffers from external sources, allows a intruder to disclose protected information.
The vulnerability of the microprogrammed programmable logic controller Modicon relates to the reading of buffers from external sources. Exploiting this vulnerability can allow an intruder, operating remotely, to disclose sensitive information by reading certain memory blocks in the controller via...
Aida64 6.00.5100 - 'Log to CSV File' Local SEH Buffer Overflow
!/usr/bin/python Exploit : Aida64 6.00.5100 'Log to CSV File' Local SEH Buffer Overflow Exploit Author : Nipun Jaswal Tested On : Windows 7 Home Basicx86 Version : 6.00.5100 Release Date : 31/May/2019 Build : 21/May/2019 Vendor Homepage: https://www.aida64.com/downloads Software Link:...
Aida64 6.00.5100 SEH Buffer Overflow
!/usr/bin/python Exploit : Aida64 6.00.5100 'Log to CSV File' Local SEH Buffer Overflow Exploit Author : Nipun Jaswal Tested On : Windows 7 Home Basicx86 Version : 6.00.5100 Release Date : 31/May/2019 Build : 21/May/2019 Vendor Homepage: https://www.aida64.com/downloads Software Link:...
RAMBleed Attack – Flip Bits to Steal Sensitive Data from Computer Memory
A team of cybersecurity researchers yesterday revealed details of a new side-channel attack on dynamic random-access memory DRAM that could allow malicious programs installed on a modern system to read sensitive memory data from other processes running on the same hardware. Dubbed RAMBleed and...
zzzphp V1.7.0 official version of the backend of the existence of arbitrary file reading vulnerability
zzphp is a free open source website builder. zzzphp v1.7.0 exists arbitrary file reading vulnerability , an attacker can exploit the vulnerability to read arbitrary files...
Microsoft Windows gdiplus Font Parsing Off-By-One Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Rancher Labs Rancher Command Injection Vulnerability
Rancher Labs Rancher is the United States Rancher Labs, Inc. of a set of open source enterprise-class container management platform. A command injection vulnerability exists in Rancher Labs Rancher. An attacker can exploit this vulnerability to read files or execute arbitrary commands...
Design/Logic Flaw
IBM Security Information Queue ISIQ 1.0.0, 1.0.1, and 1.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 159227...
H8Mail v2.0 - Email OSINT And Password Breach Hunting
Powerful and user-friendly password finder. Use h8mail to find passwords through different breach and reconnaissance services, or using local breaches such as Troy Hunt's "Collection1" or the infamous "Breach Compilation" torrent. Features Email pattern matching reg exp, useful for reading from...
CVE-2019-9187
ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs...
