CVE-2020-36220

CVE-2020-36220 affects the Rust crate va-ts (before 0.0.4). TheDemuxer type omits a required T: Send bound, allowing non‑Send types to be carried across thread boundaries. This can lead to a data race and memory corruption. The issue is documented in multiple sources (including Red Hat and RustSe...

CVE-2020-15293 Memory corruption in Bitdefender Hypervisor Introspection (VA-9336)

Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions...

Security Bulletin: IBM Security Directory Suite is affected by a security vulnerability (CVE-2018-4441)

Summary IBM Security Directory Suite SDS VA has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4441 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack trace is...

pen.k12.va.us Cross Site Scripting vulnerability OBB-1408689

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilities due to remote attacker being able to execute arbitrary code , obtain sensitive informstion , and denial of service. Vulnerability Details CVEID: CVE-2020-4464 DESCRIPTION: IBM WebSphere...

Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities

Summary IBM Security Privileged Identity Manager has addressed an issue for nss-softokn as follows. Vulnerability Details CVEID: CVE-2019-11745 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system,...

Fedora 31 : firefox (2020-449743fcc1)

VA-API under Wayland should work as expected now, added fix for mozbz1656436. ---- - Fixed VA-API video playback https://bugzilla.mozilla.org/showbug.cgi?id=1645671 ---- - New upstream update - 79.0 Note that Tenable Network Security has extracted the preceding description block directly from the...

richmond-va-free-classifieds.activeboard.com Cross Site Scripting vulnerability OBB-1244838

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

rentnowarlingtonva.com Cross Site Scripting vulnerability OBB-1237057

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

paris.onvasortir.com Cross Site Scripting vulnerability OBB-1228615

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-7816

A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by...

CVE-2020-8100 Incomplete validation in detection code in Bitdefender Engines (VA-8589)

Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while scanning a specially-crafted sample. This issue affects: Bitdefender Bitdefender Engines versions prior to 7.84063...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 10 (VA MN: 7.0.2-647, VA Agent: 7.0.2-367)

Hotfix 10 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37446 Unable to set "Advanced firewall mode with the default policy Drop" for containers. Vulnerability id: PVA-37477 VA Agent could consume 100% of one CPU. Vulnerability id: PVA-37479 VA Agent...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 9 (VA MN: 7.0.2-645, VA Agent: 7.0.2-364)

Hotfix 9 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-35779 Virtuozzo Automator warns about low disk space on SSDs with storage cache and journals. Vulnerability id: PVA-37393 VA agent can fully load MDS on nodes with lots of containers on Virtuozzo...

AirDrop 2.0 Denial Of Service

include include include include include include include include include include include // // Author: Marcelo VA!zquez aka s4vitar // AirDrop 2.0 Remote Denial of Service DoS // // Exploit Title: AirDrop 2.0 Remote Denial of Service DoS // Date: 2019-02-21 // Exploit Author: Marcelo VA!zquez aka...

ScreenStream 3.0.15 Denial Of Service

!/usr/bin/python coding: utf-8 Author: Marcelo VA!zquez aka s4vitar ScreenStream 3.0.15 Remote Denial of Service DoS Exploit Title: ScreenStream 3.0.15 Remote Denial of Service DoS Date: 2019-02-21 Exploit Author: Marcelo VA!zquez aka s4vitar Vendor Homepage: http://mobzapp.com/mirroring/index.ht...

AirMore 1.6.1 Denial Of Service

!/usr/bin/python coding: utf-8 Author: Marcelo VA!zquez aka s4vitar AirMore 1.6.1 Remote Denial of Service DoS & System Freeze Exploit Title: AirMore 1.6.1 Remote Denial of Service DoS & System Freeze Date: 2019-02-14 Exploit Author: Marcelo VA!zquez aka s4vitar Vendor Homepage:...

VA MAX 8.3.4 - (Authenticated) Remote Code Execution

VA MAX 8.3.4 - Authenticated Remote Code Execution root@nippur:/home/c/src/nippur cat vamax3.py !/usr/bin/env python quick poc for postauth rce bug in va max 8.3.4 more: https://code610.blogspot.com 10.02.2019 p.s. listening on any 4444 ... 192.168.1.126: inverse host lookup failed: Unknown host...

VA MAX 8.3.4 Remote Code Execution

root@nippur:/home/c/src/nippur cat vamax3.py !/usr/bin/env python quick poc for postauth rce bug in va max 8.3.4 more: https://code610.blogspot.com 10.02.2019 p.s. listening on any 4444 ... 192.168.1.126: inverse host lookup failed: Unknown host connect to 192.168.1.160 from UNKNOWN 192.168.1.126...

AirDroid 4.2.1.6 Denial Of Service

!/bin/bash Author: Marcelo VA!zquez aka s4vitar AirDroid Denial of Service DoS & System Crash Exploit Title: AirDroid Remote Denial of Service DoS & System Crash Date: 2019-02-07 Exploit Author: Marcelo VA!zquez Vendor Homepage: https://web.airdroid.com/ Software Link:...