WordPress IgniteUp plugin <=3.4 - Multiple vulnerabilities

Multiple vulnerabilities found by Jerome Bruandet in WordPress IgniteUp plugin versions =3.4. Vulnerabilities that could be exploited by unauthenticated users include Arbitrary File Deletion, HTML injection & CSRF in email messages, Stored Cross-Site Scripting XSS, Sensitive Information Disclosur...

Details of an Airbnb Fraud

This is a fascinating article about a bait-and-switch Airbnb fraud. The article focuses on one particular group of scammers and how they operate, using the fact that Airbnb as a company doesn't do much to combat fraud on its platform. But I am more interested in how the fraudsters essentially...

CVE-2006-0062

xlockmore 5.13 allows potential xlock bypass when FVWM switches to the same virtual desktop as a new Gaim window...

expat: heap-based buffer over-read via crafted XML input

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber then resulted in a heap-based buffer over-read...

The vulnerability of the Veriexec subsystem of the JunOS operating system for Ethernet switches EX2300, EX2300-C, and EX3400 allows a hacker to gain full control over the system.

The vulnerability of the Veriexec subsystem in the JunOS operating system, related to Ethernet switches of the EX2300, EX2300-C, and EX3400 models, is linked to errors during file integrity checks. Exploiting this vulnerability can allow an attacker to gain full control over the system...

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch allows a attacker to gain access to protected information.

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...

Belkin Wemo Switch 28B Input Validation Error Vulnerability

The Belkin Wemo Switch 28B is a smart outlet device from Belkin USA. A security vulnerability exists in the Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS version. A remote attacker can exploit this vulnerability to cause a denial of service by sending a StoreRules request with a specially...

CVE-2019-17532

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

CVE-2019-17532

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

Memory corruption

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

CVE-2019-17532

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

CVE-2019-17532

Belkin Wemo Switch 28B (WW_2.00.11057.PVT-OWRT-SNS) is affected by CVE-2019-17532. A remote attacker can trigger a denial of service (persistent rules-processing outage) by sending a specially crafted ruleDbBody in a StoreRules request to the upnp/control/rules1 URI, causing database corruption. ...

CVE-2019-1230

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Information Disclosure Vulnerability'...

CVE-2019-1230

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Information Disclosure Vulnerability'...

CVE-2019-1230

The CVE-2019-1230 entry describes an information-disclosure vulnerability in Microsoft Windows Hyper-V, where the Hyper-V Network Switch fails to properly validate input from an authenticated user on a guest OS. The root cause is a flawed input-validation path within the Hyper-V network switch, e...

CVE-2019-1230

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Information Disclosure Vulnerability'...

Microsoft Windows Hyper-V Information Disclosure Vulnerability (CNVD-2019-35574)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Hyper-V is one of the virtualization products that supports...

Microsoft Windows Multiple Vulnerabilities (KB4519338)

This host is missing a critical security update according to Microsoft KB4519338 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Hyper-V Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially...

KB4520004: Windows 10 Version 1709 October 2019 Security Update

The remote Windows host is missing security update 4520004. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. CVE-2019-1340 - A spoofing vulnerability exists...