CVE-2017-20012

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This...

CVE-2017-20012

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This...

CVE-2017-20012 WEKA INTEREST Security Scanner Stresstest Scheme denial of service

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This...

CVE-2017-20012

CVE-2017-20012 affects WEKA INTEREST Security Scanner up to v1.8, specifically the Stresstest Scheme Handler. The vulnerability enables a local denial-of-service condition; the exploit has been disclosed and the affected product is no longer supported. Some sources suggest a workaround: disable t...

CVE-2017-20012 WEKA INTEREST Security Scanner Stresstest Scheme denial of service

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This...

PT-2022-7885 · Unknown · Weka Interest Security Scanner

Name of the Vulnerable Software and Affected Versions: WEKA INTEREST Security Scanner versions up to 1.8 Description: A problematic vulnerability has been found in the Stresstest Scheme Handler of WEKA INTEREST Security Scanner, leading to a denial of service. The attack must be approached locall...

WEKA INTEREST Security Scanner 安全漏洞

WEKA INTEREST Security Scanner is a popular data exploration program by the University of Waikato team. A security vulnerability exists in WEKA INTEREST Security Scanner version 1.8 Stresstest Scheme Handler. No information about the vulnerability is available at this time, please check CNNVD or...

CVE-2017-20012: Improper Resource Shutdown or Release

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This...

Experts Uncover Campaign Stealing Cryptocurrency from Android and iPhone Users

Researchers have blown the lid off a sophisticated malicious scheme primarily targeting Chinese users via copycat apps on Android and iOS that mimic legitimate digital wallet services to siphon cryptocurrency funds. "These malicious apps were able to steal victims' secret seed phrases by...

CVE-2022-27240

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion...

CVE-2022-27240: Buffer Copy without Checking Size of Input

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion...

PT-2022-18322

Name of the Vulnerable Software and Affected Versions Glewlwyd SSO server versions 2.x before 2.6.2 Description The issue is related to a buffer overflow in the scheme/webauthn.c file, associated with a webauthn assertion. Recommendations For versions prior to 2.6.2, update to version 2.6.2 or...

A week in security (March 7 – March 13)

Last week on Malwarebytes Labs: The struggle to reduce bug-fixing time is real Update now! Mozilla patches two actively exploited vulnerabilities Google takes on Docs notification spammers When fake dating profiles try the military approach Azure AutoWarp brings automation headaches RagnarLocker...

CVE-2022-25218

The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetdstartup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext will be decrypted by OpenSSL's...

Design/Logic Flaw

The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetdstartup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext will be decrypted by OpenSSL's...

CVE-2022-21158

A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link with javascript: scheme inside the document may allow an attacker to execute an arbitrary script on the PC of the user using marktext...

Open Redirect

urijs is vulnerable to open redirect. Lack of proper handling of excessive colons in scheme delimiter allows an attacker to parse malicious URL to redirect the user...

CVE-2022-21158: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link with javascript: scheme inside the document may allow an attacker to execute an arbitrary script on the PC of the user using marktext...

MarkText Cross-Site Scripting Vulnerability

MarkText is a simple and elegant Markdown editor with a focus on speed and usability.A cross-site scripting vulnerability exists in versions of MarkText prior to 0.17.0, which stems from improper handling of links using javascript:scheme in documents. A remote attacker could exploit this...

PT-2022-14890

Name of the Vulnerable Software and Affected Versions marktext versions prior to v0.17.0 Description A stored cross-site scripting issue due to improper handling of links with the javascript: scheme inside documents may allow an attacker to execute arbitrary scripts on a user's PC. Recommendation...