openSUSE Security Update : ucode-intel (openSUSE-2019-1468) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

This update for ucode-intel fixes the following issues : The Intel CPU Microcode was updated to the official QSR 2019.1 Microcode release bsc1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091 ---- new platforms ---------------------------------------- VLV C0 6-37-8/02 00000838 At...

SUSE-SU-2019:1313-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: The Intel CPU Microcode was updated to the official QSR 2019.1 Microcode release bsc1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091 ---- new platforms ---------------------------------------- VLV C0 6-37-8/02 00000838 Ato...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Easy Chat Server 3.1 Denial Of Service Exploit

!/usr/bin/python --------------------------------------------------------- Title: Easy Chat Server Version 3.1 - DOS Author: Miguel Mendez Z Team: www.exploiting.cl Vendor: http://www.echatserver.com Software Link: http://www.echatserver.com/ecssetup.exe Platforms: Windows Version: 3.1 Tested on:...

Easy Chat Server 3.1 - 'message' Denial of Service (PoC)

!/usr/bin/python --------------------------------------------------------- Title: Easy Chat Server Version 3.1 - DOS Date: 2019-05-07 Author: Miguel Mendez Z Team: www.exploiting.cl Vendor: http://www.echatserver.com Software Link: http://www.echatserver.com/ecssetup.exe Platforms: Windows Versio...

Denial Of Service (DoS)

The kernel packages contain the Linux kernel, the core of any Linux operating system. It was found that the Linux kernel's Infiniband subsystem did not properly sanitize input parameters while registering memory regions from user space via the uverbs API. A local user with access to a...

SUSE-SU-2018:3933-2 Security update for java-1_7_1-ibm

java-171-ibm was updated to Java 7.1 Service Refresh 4 Fix Pack 35 bsc1116574: Consumability - IJ10515 AIX JAVA 7.1.3.10 GENERAL PROTECTION FAULT WHEN ATTEMPTING TO USE HEALTH CENTER API Class Libraries - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932 CVE-2018-31...

How Credit Unions Can Optimize & Secure the Mobile App Experience

A small army of digital natives are about to become the largest generation globally. Gen Z, those born after 1996, will account for 32% of the world's population 7.7 billion in 2019 and outnumber millennials for the first time, according to World Economic Forum. This year, it will be critical for...

Security Bulletin: z/TPF is affected by an OpenSSL vulnerability

Summary The z/TPF version of OpenSSL was updated to address the vulnerability described by CVE-2019-1559. Vulnerability Details CVEID: CVE-2019-1559 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection...

File Upload Vulnerability in Z-BlogPHP 1.5.2 Zero Backend

Z-BlogPHP is an open source PHP-based blog system developed by Z-Blog. Z-BlogPHP1.5.2Zero back-end theme management and plug-in management of the existence of file upload vulnerability, attackers can use the vulnerability to obtain control of the web server...

Security Bulletin: Vulnerability in IBM Java SDK affects IBM Z Open Development (CVE-2018-3180)

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition that is used by IBM Z Open Development. The issue was disclosed as part of the IBM Java SDK updates in October 2018. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like...

Security Bulletin: Vulnerability in IBM Java SDK affects IBM Developer for z Systems (CVE-2018-3180)

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition that is used by IBM Developer for z Systems. The issue was disclosed as part of the IBM Java SDK updates in October 2018. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect z/TPF

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product, you should evaluate your code to...

Heap overflow

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwgdecodeeeddata at decode.c for the z dimension...

CVE-2019-9773

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwgdecodeeeddata at decode.c for the z dimension...

CVE-2019-9773

CVE-2019-9773 affects GNU LibreDWG, with a heap-based buffer overflow in dwg_decode_eed_data (z dimension) in versions 0.7 and 0.7.1645. Connected advisories show openSUSE/SUSE patches and releases (e.g., libredwg 0.9.3) addressing this family of issues, including corrections for overflows and re...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

zzzphp CMS 1.6.1 - Cross-Site Request Forgery

zzzphp CMS 1.6.1 - Cross-Site Request Forgery Exploit Title: Cross-Site Request ForgeryCSRF of zzzphp cms 1.6.1 Google Dork: intext:"2015-2019 zzcms.com" Date: 26/02/2019 Exploit Author: Yang Chenglong Vendor Homepage: http://www.zzzcms.com/index.html Software Link: http://115.29.55.18/zzzphp.zip...

Security Bulletin: z/TPF is affected by GNU C library (glibc) vulnerabilities

Summary The GNU C library glibc provided with the z/TPF system was updated to address the vulnerabilities described by CVE-2011-1071 and CVE-2014-9761. Vulnerability Details CVEID: CVE-2011-1071 DESCRIPTION: GNU C Library could allow a remote attacker to execute arbitrary code on the system, caus...

Security Bulletin: Vulnerabilities in IBM Java SDK (October 2018) affecting IBM Application Delivery Intelligence for IBM Z V5.1.0, V5.0.5 and V5.0.4 (CVE-2018-3139, CVE-2018-3180)

Summary Multiple vulnerabilities are identified in IBM® SDK Java™ Technology Edition Version 1.7 and Version 1.8 that are used by IBM Application Delivery Intelligence for IBM Z V5.1.0, V5.0.5, and V5.0.4 respectively. These issues were disclosed as part of the IBM Java SDK updates in October 201...