USN-3996-1: GNU Screen vulnerability

Kuang-che Wu discovered that GNU Screen improperly handled certain input. An attacker could use this issue to cause GNU Screen to crash, resulting in a denial of service or the execution of arbitrary code...

USN-3996-1 GNU Screen vulnerability

Kuang-che Wu discovered that GNU Screen improperly handled certain input. An attacker could use this issue to cause GNU Screen to crash, resulting in a denial of service or the execution of arbitrary code...

Samsung Knox Secure Folder Lock Screen Bypass Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerability installations of Samsung Secure Folder. An attacker must first obtain physical access to the device in order to exploit this vulnerability. The specific flaws exists within the the handling of the lock...

PT-2019-18304 · Samsung · Samsung Knox

Name of the Vulnerable Software and Affected Versions: Samsung Knox version 1.2.02.39 Description: This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain physical access to the device to exploit this. The flaw exists within the...

SUSE SLED12 / SLES12 Security Update : screen (SUSE-SU-2019:1354-1)

This update for screen fixes the following issues : Security issue fixed : CVE-2015-6806: Fixed a stack overflow due to deep recursion bsc944458. Non-security issue fixed: Fixed segmentation faults related to altscreen and resizing screen bsc1130831. Note that Tenable Network Security has extract...

SUSE-SU-2019:1354-1 Security update for screen

This update for screen fixes the following issues: Security issue fixed: - CVE-2015-6806: Fixed a stack overflow due to deep recursion bsc944458. Non-security issue fixed: - Fixed segmentation faults related to altscreen and resizing screen bsc1130831...

FV Flowplayer Video Player <= 7.3.13.727 - Unauthenticated Stored XSS

The vulnerable function is exposed to unauthenticated users over wpajaxnoprivfvwpflowplayeremailsignup ajax hook. It saves anything that user provides in email POST parameter. PoC Send POST request to wp-admin/admin-ajax.php with body content: "[email protected]" The...

CVE-2019-12168

Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell aka Administration Commands screen...

CVE-2019-5946

Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen...

CVE-2019-5946: URL Redirection to Untrusted Site

Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen...

PT-2019-17887

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.2.4 through 4.10.1 Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks, via the Login Screen. Recommendations For versions 4.2.4 through 4.10....

CVE-2018-4026

An exploitable denial-of-service vulnerability exists in the XMLGetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted set of packets can cause an invalid memory dereference, resulting in a device reboot...

ImageWorsener Resource Management Error Vulnerability

ImageWorsener is a set of image scaling and processing utilities. A resource management error vulnerability exists in the 'iwgifinitscreen' function of the imagew-gif.c file in ImageWorsener version 1.3.2. The vulnerability stems from mismanagement of system resources e.g., memory, disk space,...

CVE-2017-12804

The iwgifinitscreen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers to cause a denial of service hmemory exhaustion via a crafted file...

PT-2019-7919

Name of the Vulnerable Software and Affected Versions ImageWorsener version 1.3.2 Description The issue allows remote attackers to cause a denial of service, specifically memory exhaustion, by providing a crafted file. This is related to the iwgif init screen function in imagew-gif.c at line 510...

Aerotech Ensemble LAB Motion Module Detection

Binary data 763924.prm...

Fedora Update for tmux FEDORA-2018-e5e93f4c7b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

May 3, 2019—KB4495667 (OS Build 17763.475)

None None...

HostHunter - A Recon Tool For Discovering Hostnames Using OSINT Techniques

A tool to efficiently discover and extract hostnames over a large set of target IP addresses. HostHunter utilises simple OSINT techniques. It generates a CSV file containing the results of the reconnaissance. Taking screenshots was also added as a beta functionality. Demo Currently GitLab's marku...

CVE-2018-15000

The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name of com.vivo.smartshot versionCode=1, versionName=3.0.0. This app contains an exported service named...