9580 matches found
Windows Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. To exploit this vulnerability, an attacker...
Windows Information Disclosure Vulnerability
An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. An attacker could then install...
CVE-2019-1756 Cisco IOS XE Software Command Injection Vulnerability
A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has...
CVE-2019-1756 Cisco IOS XE Software Command Injection Vulnerability
A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has...
The vulnerability of the Microsoft XML Core Services MSXML on the Windows operating system allows a hacker to execute malicious code and gain control over the system.
The vulnerability of the Microsoft XML Core Services MSXML in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute malicious code remotely and gain control over the system...
Hackers Take Down Safari, VMware and Oracle at Pwn2Own
Hackers took down Apple Safari, VMware Workstation, and Oracle VirtualBox on Wednesday, the first day of Pwn2Own, the annual hacking competition held in tandem with the CanSecWest conference in Vancouver. Contestants with the team of Fluoroacetate Amat Cama and Richard Zhu were the first to hit p...
Microsoft Windows Kernel Information Disclosure Vulnerability
Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows utilizes a graphical mode GUI.Windows Subsystem for Linux abbreviated as WSL is a compatibility layer designed to enable the native running of Linux binary executables on Windows 10 and Windows Server 201...
PHP 7.2.x < 7.2.14 Multiple vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.40, 7.1.x prior to 7.1.26, 7.2.x prior to 7.2.14 or 7.3.x prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc...
EulerOS Virtualization 2.5.2 : yum-utils (EulerOS-SA-2019-1080)
According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repositor...
EasyBoot v6.6.0.800 - Stack Buffer Overflow Vulnerability
Document Title: =============== EasyBoot v6.6.0.800 - Stack Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2176 Release Date: ============= 2019-03-07 Vulnerability Laboratory ID VL-ID: ====================================...
RSAC 2019: Container Escape Hack Targets Vulnerable Linux Kernel
Researchers at CyberArk have created a proof-of-concept attack that allows adversaries to bypass container security, escape the container and compromise an entire host system. However, the attack scenario is limited, in that a successful attack depends on unpatched vulnerabilities to be present i...
Memu Play 6.0.7 Privilege Escalation
Exploit Title: Memu Play 6.0.7 - Privilege Escalation PoC Date: 20/02/2019 Author: Alejandra SA!nchez Vendor Homepage: https://www.memuplay.com/ Software Link: https://www.memuplay.com/download-en.php?filename=Memu-Setup&from=officialrelease Version: 6.0.7 Tested on: Windows 10 / Windows 7...
Ncat TLS Listener
This host seems to be running an instance of Ncat that is listening over TLS. Ncat is an open source networking tool that can be used as a backdoor to allow unauthorized entry and control of the remote host An attacker may use it to steal your passwords, modify your data, and prevent you from...
Microsoft Edge and ChakraCore Information Disclosure Vulnerability (CNVD-2019-42799)
Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge and ChakraCore. The vulnerability can be exploited by an attacker to obtain information to further...
Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2019-10051)
Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. An information disclosure vulnerability exists in Microsoft Windows. The vulnerability originates from the Windows GDI component improperly disclosing its memory contents. An...
U.S. Dept Of Defense: [https://███] Local File Inclusion via graph.php
Summary: There exists a Local File Inclusion vulnerability on https://████ due to a known vulnerability in the ZendTo library. This was fixed in Version 5.16-6 Beta, although ██████ is still running ZendTo 5.11. Impact This allows path traversal in a file name that is then returned to the user...
New critical vulnerability discovered in open-source office suites
A great number of attack techniques these days are using Microsoft Office documents to distribute malware. In recent years, there has been serious development on document exploit kit builders, not to mention the myriad of tricks that red-teamers have come up with to bypass security solutions. In...
PHP 7.3.x < 7.3.1 Multiple vulnerabilities.
According to its banner, the version of PHP running on the remote web server is 7.3.x prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc function in gdinterpolation.c. An unauthenticated, remote attacker can have...
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain full control over the application.
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...
Directory Traversal
redhat-virtualization-host is vulnerable to directory traversal attacks. The vulnerability exists as a directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they...