2409 matches found
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows a malicious actor to trigger a service failure.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the blocking/“freezing” of V8 elements. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially crafted web page...
What is BAT and why you should install Brave Browser?
BAT is an Ethereum token that powers Brave Software's blockchain-based digital advertising platform. Internet users who browse the web using Brave's free web browser available at can choose to replace the ads they see with ads on Brave's ad network. Users then receive BAT from advertisers as...
The vulnerability of the Active Directory Federation Services (ADFS) on the Windows operating system allows a perpetrator to circumvent the blocking policy of ADFS.
The vulnerability of the Active Directory Federation Services ADFS on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to circumvent blocking policies by using a specially created application and brute-force...
Windows Defender Firewall: Domain Profile: Allow unicast response
The policy determines whether unicast responses to multicast or broadcast messages for a domain connection will be blocked. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of...
SuperDoctor5 - 'NRPE' Remote Code Execution
SuperMicro implemented a Remote Command Execution plugin in their implementation of NRPE in SuperDocter 5, which is their monitoring utility for SuperMicro chassis'. This is an intended feature but leaves the system open by default to unauthenticated remote command execution by abusing the...
SuperDoctor5 NRPE Remote Code Execution
SuperMicro implemented a Remote Command Execution plugin in their implementation of NRPE in SuperDocter 5, which is their monitoring utility for SuperMicro chassis'. This is an intended feature but leaves the system open by default to unauthenticated remote command execution by abusing the...
CVE-2017-8334
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection...
Cross site scripting
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection...
CVE-2017-8334
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection...
Telus Actiontec T2200H Local Elevation of Privilege Vulnerability
The Actiontec Electronics T2200H is a modem from Actiontec Electronics, USA. A security vulnerability exists in the Actiontec Electronics T2200H T2200H-31.128L.08 release. The vulnerability can be exploited by an attacker to obtain a shell with root privileges to permanently modify the device,...
How to Stop Robocalls—or At Least Slow Them Down
Let's be honest, you can't kill robocalls completely. But you can block more of them than you might think...
Security News This Week: A Teen Waltzed Into Mar-a-Lago
Google's ad-blocking backlash, a privacy lawsuit against Apple, and more of the week's top security news...
Forbid blocking IP ranges as big as /1 and /2, as done on ruwikiquote using the API
More info at https://phabricator.wikimedia.org/T199540...
NetAware 1.20 Add Block / Share Name Denial Of Service
-- coding: utf-8 -- Exploit Title: NetAware 1.20 - 'Add Block' Denial of Service PoC Date: 22/05/2019 Author: Alejandra Sánchez Vendor Homepage: https://www.infiltration-systems.com Software: http://www.infiltration-systems.com/Files/netaware.zip Version: 1.20 Tested on: Windows 7 Proof of Concep...
Easy WP SMTP v1. 3. 9）0 day vulnerability is being attacked in the process and reproducibility-vulnerability warning-the black bar safety net
Foreword Your own blog site with wordpres hosting, last month found some abnormalities. 3.12 days, the mailbox explosion, received more than 100 letter on the site is the blasting of the notification mail. ! Day to see also not strange, because before it appeared such a situation, every day there...
Intelbras IWR 3000N - Denial of Service (Remote Reboot) Vulnerability
Exploit for hardware platform in category web applications /bin/bash PoC based on CVE-2019-11415 created by Social Engineering Neo. Credit: https://1.337.zone/2019/04/08/intelbras-iwr-3000n-any-version-dos-on-malformed-login-request/ A malformed login request allows remote attackers to cause a...
openstack-neutron: incorrect validation of port settings in iptables security group driver
A validation flaw was discovered in the iptables firewall module in OpenStack Neutron. By setting a destination port in a security group rule, along with a protocol that does not support that option for example, VRRP, an authenticated user could block further application of security group rules f...
ICSA-19-120-01_Rockwell Automation CompactLogix 5370
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: CompactLogix 5370 Vulnerabilities: Uncontrolled Resource Consumption, Stack-based Buffer Overflow 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to...
GitHub hosted Magecart skimmer used against hundreds of e-commerce sites
Every day, new e-commerce websites fall into the hands of one of the many Magecart skimmers. Unbeknownst to shoppers, criminals are harvesting their personal information, including payment details in the online equivalent of ATM card skimming. Most often the skimming code—written in JavaScript an...