Microsoft Edge Chakra Scripting Engine CVE-2019-1103 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

Cisco Email Security Appliance AsyncOS Software Remote Security Bypass Vulnerability

Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. A remote security bypass vulnerability exists in the GZIP decompression engine of AsyncOS Software in the Cisco ESA, which stems from the program...

Microsoft Internet Explorer Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2019-24756)

Internet Explorer, is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer and Windows Internet Explorer abbreviated as IE. A remote memory corruption vulnerability exists in Microsoft Internet Explorer Scripting Engine, which can be exploited by an attacker to execute...

CVE-2018-10692

An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily...

OnApp CVE-2019-12491 Command Execution Vulnerability

Description OnApp is prone to a remote command-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary commands with root privileges in the context of the affected server. OnApp versions 5.0 prior to 5.0.0-88, 5.1 through 5.4, 5.5 prior to 5.5.0-93,...

fence-agents remote denial of service vulnerability

fence-agents is an agent program that supports remote power management of clustered devices. A denial of service vulnerability exists in versions of fence-agents prior to 4.3.4. An attacker can exploit this vulnerability to cause a denial of service...

Cross site scripting

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...

Buffer overflow

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...

Command injection

A remote command injection vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5355

A remote denial of service vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-6758

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

ircdkit vulnerable to Denial of Service due to unhandled connection end event

Versions of ircdkit 1.0.3 and prior are vulnerable to a remote denial of service. Recommendation Upgrade to version 1.0.4...

Joomla Com_Attachments Component File Upload Vulnerability

Joomla is an open source content management system CMS. A file upload vulnerability exists in the Joomla ComAttachments component. A remote attack is allowed to upload arbitrary files/shells...

Microsoft Edge CVE-2019-0926 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Edge Recommendations...

Pocsuite

This is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team. It is a Python-based framework that supports both Python and JSON formats for proof-of-concept PoC development. The framework provides a powerful proof-of-concept engine and various niche...

Command Execution Vulnerability in AUO Internet Behavior Management System

AUO Electronic Equipment Shanghai Co., Ltd. is a company that mainly deals with network equipment, wireless equipment, switches and other items. A command execution vulnerability exists in the AUO Internet Behavior Management System. It allows an attacker to remotely execute commands to gain serv...

How to build your own PoC framework Pocsuite3 using the article-the vulnerability warning-the black bar safety net

Compared to boring the usage of the description, the more I want to say about Pocsuite3 why will have these features as well as how to achieve. If you also want to build a similar tool, Pocsuite3 some of the thoughts may be able to help you. This article is also recorded Pocsuite3 development...

PT-2019-16965 · Ibm · Ibm Tririga Application Platform

Name of the Vulnerable Software and Affected Versions: IBM TRIRIGA Application Platform versions 3.5.3 through 3.6.0 Description: The issue allows a remote attacker to exploit an XML External Entity Injection XXE attack when processing XML data, potentially exposing sensitive information or...

Orpak SitOmat Cross-Site Scripting Vulnerability

Orpak SitOmat is a remote takeover refueling system from Orpak India. A cross-site scripting vulnerability exists in Orpak SitOmat, which can be exploited by remote attackers to inject web script or HTML...

CVE-2019-3400

The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the jql parameter...