CVE-2019-6758

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

ircdkit vulnerable to Denial of Service due to unhandled connection end event

Versions of ircdkit 1.0.3 and prior are vulnerable to a remote denial of service. Recommendation Upgrade to version 1.0.4...

Joomla Com_Attachments Component File Upload Vulnerability

Joomla is an open source content management system CMS. A file upload vulnerability exists in the Joomla ComAttachments component. A remote attack is allowed to upload arbitrary files/shells...

Microsoft Edge CVE-2019-0926 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Edge Recommendations...

Pocsuite

This is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team. It is a Python-based framework that supports both Python and JSON formats for proof-of-concept PoC development. The framework provides a powerful proof-of-concept engine and various niche...

Command Execution Vulnerability in AUO Internet Behavior Management System

AUO Electronic Equipment Shanghai Co., Ltd. is a company that mainly deals with network equipment, wireless equipment, switches and other items. A command execution vulnerability exists in the AUO Internet Behavior Management System. It allows an attacker to remotely execute commands to gain serv...

How to build your own PoC framework Pocsuite3 using the article-the vulnerability warning-the black bar safety net

Compared to boring the usage of the description, the more I want to say about Pocsuite3 why will have these features as well as how to achieve. If you also want to build a similar tool, Pocsuite3 some of the thoughts may be able to help you. This article is also recorded Pocsuite3 development...

PT-2019-16965 · Ibm · Ibm Tririga Application Platform

Name of the Vulnerable Software and Affected Versions: IBM TRIRIGA Application Platform versions 3.5.3 through 3.6.0 Description: The issue allows a remote attacker to exploit an XML External Entity Injection XXE attack when processing XML data, potentially exposing sensitive information or...

Orpak SitOmat Cross-Site Scripting Vulnerability

Orpak SitOmat is a remote takeover refueling system from Orpak India. A cross-site scripting vulnerability exists in Orpak SitOmat, which can be exploited by remote attackers to inject web script or HTML...

CVE-2019-3400

The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the jql parameter...

Cribl UI Command Execution Vulnerability

Cribl is a log analysis tool.Cribl UI is one of the user interfaces. A command execution vulnerability exists in Cribl UI version 1.5.0, which can be exploited by a remote attacker to run arbitrary commands via an unauthenticated web request...

Oracle MySQL Server DoS

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has vulnerabilities related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Samba LDAP Heap Buffer Overflow DoS

The vulnerability of the ldbwildcardcompare function in the LDAP component of the Samba networking software lies in the reading of data beyond the allocated buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Apache HTTP Server Remote Vulnerability

Apache HTTP Server is the United States Apache Apache Software Foundation of an open source web server . A remote vulnerability exists in Apache HTTP Server. An attacker can exploit the vulnerability to perform unauthorized operations...

BlueCMS SQL Injection Vulnerability

BlueCMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in BlueCMS version 1.6. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

phpFK lite cross-site scripting vulnerability

phpFK lite is a forum system written in PHP. A cross-site scripting vulnerability exists in phpFK lite. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Total.js CMS Cross-Site Scripting Vulnerability

Total.js CMS is a content management system CMS based on a NoSQL database. A cross-site scripting vulnerability exists in Total.js CMS version 12.0.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Apache Karaf Arbitrary File Overwrite Vulnerability

Apache Karaf is the United States Apache Apache Foundation for the deployment of applications and components of a lightweight OSGi Java Dynamic Modular System container. An arbitrary file overwrite vulnerability exists in Apache Karaf versions prior to 4.2.3, which can be exploited by a remote...

Moxa EDS IKS Switches Authentication Bypass

The vulnerability of Moxa EDS and IKS microcontroller software lies in the absence of restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

[ASA-201903-12] libssh2: multiple issues

Arch Linux Security Advisory ASA-201903-12 ========================================== Severity: Critical Date : 2019-03-22 CVE-ID : CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 Package : libssh2 Type : multiple issue...