CVE-2018-16593

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection...

Directory traversal

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal...

Design/Logic Flaw

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection...

Buffer overflow

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow...

CVE-2018-16593

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection...

CVE-2018-16593

CVE-2018-16593 affects Sony Bravia TV Photo Sharing Plus (up to version 8.587). The flaw is a shell metacharacter injection in the Photo Sharing Plus component, enabling arbitrary commands execution with root privileges if a device is on the same network. Exploitation is described as local/adjace...

CVE-2018-16594

CVE-2018-16594 describes a Directory Traversal vulnerability in Sony Bravia TV Photo Sharing Plus on the TV firmware up to version 8.587. The issue arises from how Photo Sharing Plus handles uploaded file names (e.g., crafted ../../), allowing access to restricted filesystem paths outside the int...

CVE-2018-16594

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal...

CVE-2018-16595

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow...

CVE-2018-16595

CVE-2018-16595 affects the Sony Bravia TV Photo Sharing Plus component (versions 8.587 and earlier). Affected functionality: memory write/read operations due to insufficient input size checking, causing a buffer/heap overflow (root cause: missing data boundary validation). Impact: potential disru...

CocoaDebug - iOS Debugging Tool

iOS Debugging Tool Shake to hide or show the black bubble. support both device and simulator Long press the black bubble to show UIDebuggingInformationOverlay. Apple's Private API, support iOS 10/11/12 Application memory usage and FPS. List all print and NSLog messages which have been written by...

Google Chrome Security Bypass Vulnerability (CNVD-2019-17517)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in CORS in versions of Google Chrome prior to 75.0.3770.80. An attacker can exploit this vulnerability to bypass security restrictions and gain unauthorized access to the system...

OPENSUSE-SU-2019:1527-1 Security update for rmt-server

This update for rmt-server to version 2.1.4 fixes the following issues: - Fix duplicate nginx location in rmt-server-pubcloud bsc1135222 - Mirror additional repos that were enabled during mirroring bsc1132690 - Make service IDs consistent across different RMT instances bsc1134428 - Make SMT data...

Protect

Server Message Block SMB 1.0 - a legacy file and print sharing protocol - has been deprecated by Microsoft due to multiple weaknesses remote code execution, downgrade, man-in-the-middle, collision and pre-image attack...

Cross site scripting

A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the file upload and file preview features of the application. An authenticated attacker can upload an HTML file containing JavaScript code and afterwards a file preview URL can be use...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2019:1381-1)

This update for rmt-server to version 2.1.4 fixes the following issues : Fix duplicate nginx location in rmt-server-pubcloud bsc1135222 Mirror additional repos that were enabled during mirroring bsc1132690 Make service IDs consistent across different RMT instances bsc1134428 Make SMT data import...

Typora 0.9.9.24.6 - Directory Traversal Vulnerability

Exploit Title: Code execution via path traversal Exploit Author: Dhiraj Mishra Vendor Homepage: http://typora.io Software Link: https://typora.io/download/Typora.dmg Version: 0.9.9.24.6 Tested on: macOS Mojave v10.14.4 CVE: CVE-2019-12137 References: https://nvd.nist.gov/vuln/detail/CVE-2019-1213...

Medical industry struggles with PACS data leaks

In the medical world, sharing patient data between organizations and specialists has always been an issue. X-Rays, notes, CT scans, and any other data or related files have always existed and been shared in their physical forms slides, paperwork. When a patient needed to take results of a test to...

Sharing Threat Intelligence: Time for an Overhaul

Most organizations don’t really have a good way of sharing threat-related data outside of their own industry verticals. Sure, there are Information Sharing and Analysis Centers ISACs; i.e. FS-ISACs for the financial-services industry. But the information still tends to stay in industry-specific...

DeepSound 1.0.4 - SQL Injection

=========================================================================================== Exploit Title: DeepSound 1.0.4 - SQL Inj. Dork: N/A Date: 15-05-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://codecanyon.net/item/deepsound-the-ultimate-php-music-sharing-platform/23609470...