PT-2020-10795

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.5.0.20733 Description An issue was discovered in the 3D Plugin Beta, causing a crash due to void data mishandling. Recommendations For versions prior to 9.5.0.20733, update to version 9.5.0.20733...

CVE-2020-13786

D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF...

CVE-2020-13784

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

CVE-2020-13785

D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...

CVE-2020-13783

D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information...

CVE-2020-13782

D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection...

Information disclosure

D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information...

CVE-2020-13784

CVE-2020-13784 concerns the D-Link DIR-865L Ax router with firmware 1.20B01 Beta, where the pseudo-random number generator uses a predictable seed. The connected CNVD entry confirms a security feature issue vulnerability for the same device/firmware, citing the easily guessable PRNG seed as the u...

CVE-2020-13785

D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...

CVE-2020-13785: Inadequate Encryption Strength

D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...

CVE-2020-13787: Cleartext Transmission of Sensitive Information

D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information...

Langfang Extreme Networks Technology Co., Ltd Extreme CMS beta version suffers from arbitrary file download vulnerability

Extreme CMS is open source and free PHPCMS web content management system. Ltd Extreme CMS beta version suffers from an arbitrary file download vulnerability, which can be exploited by attackers to compromise confidentiality...

iOS XML Bug

This is a good explanation of an iOS bug that allowed someone to break out of the application sandbox. A summary: What a crazy bug, and Siguza's explanation is very cogent. Basically, it comes down to this: XML is terrible. iOS uses XML for Plists, and Plists are used everywhere in iOS and MacOS...

MPC Sharj 3.11.1 - Arbitrary File Download Exploit

Exploit for php platform in category web applications Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download Exploit Author : SajjadBnd Date : 2020-05-02 Software Link : http://dl.nuller.ir/mpc-sharj-vr3.11.1betawww.nuller.ir.zip Tested on : Ubuntu 19.10 Version : 3.11.1 Beta DESCRIPTION MPC...

Hyperledger Iroha has a flawed logic vulnerability

Hyperledger Iroha is a distributed system for asset creation and management based on blockchain technology. A security vulnerability exists in Hyperledger Iroha versions 1.0beta and 1.0.0beta-1. An attacker can exploit the vulnerability by sending a specially crafted request to bypass signature...

[SECURITY] Fedora 30 Update: pxz-4.999.9-19.beta.20200421git.fc30

Parallel XZ is a compression utility that takes advantage of running XZ compression simultaneously on different parts of an input file on multiple cores and processors. This significantly speeds up compression time...

[SECURITY] Fedora 32 Update: pxz-4.999.9-19.beta.20200421git.fc32

Parallel XZ is a compression utility that takes advantage of running XZ compression simultaneously on different parts of an input file on multiple cores and processors. This significantly speeds up compression tim e...

XSS vulnerability in WeiPHP 5.0 beta frontend Ga***.php at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. An XSS vulnerability exists in the frontend Ga.php of WeiPHP 5.0 beta version by Shenzhen Yuanmeng Yun Technology Co. Attackers can use this vulnerability to insert...

Apple Patches Two iOS Zero-Days Abused for Years

Update Researchers are reporting two Apple iOS zero-day security vulnerabilities affecting its Mail app on iPhones and iPads. Impacted are iOS 6 and iOS 13.4.1. Apple patched both vulnerabilities in iOS 13.4.5 beta, released last week. A final release of iOS 13.4.5 is expected soon. Both...

Atomic Alarm Clock 6.3 - Stack Overflow (Unicode+SEH)

Exploit Title: Atomic Alarm Clock 6.3 - Stack Overflow Unicode+SEH Exploit Author: Bobby Cooke Date: 2020-04-17 Vendor: Drive Software Company Vendor Site: http://www.drive-software.com Software Download: http://www.drive-software.com/download/ataclock.exe Tested On: Windows 10 - Pro 1909 x86...