infinispan: Unsafe deserialization of malicious object injected into data cache

It was found that the Hotrod client in Infinispan would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks...

PT-2018-4591

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor version 10 Description The issue allows local users to obtain sensitive information by reading cached browser data. Recommendations For IBM Security Guardium Database Activity Monitor version 10,...

Directory Traversal Vulnerability in Cicada Knowledge Enterprise Portal System

Cicada Knowledge Enterprise Portal System is a web content management system. A directory traversal vulnerability exists in Cicada Knowledge Enterprise Portal System. The vulnerability is due to improper handling of reading cached files and can be exploited by an attacker to read PHP files on the...

NETGEAR Magic telnetd Enabler Exploit

This Metasploit module sends a magic packet to a NETGEAR device to enable telnetd. Upon successful connect, a root shell should be presented to the user. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

PT-2018-3591

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 52.7 Firefox versions prior to 59 Description The issue is related to the "fetch" API, which under certain circumstances can return transient local copies of resources that were sent with a "no-store" or "no-cache...

The vulnerability of the Mozilla Firefox ESR browser arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mozilla Firefox ESR browser arises from an operation that goes beyond the buffer boundaries when applying style rules to pseudo-elements such as ::first-line. Exploiting this vulnerability can allow a malicious actor to cause a service failure using cached style data...

IBM Cognos Analytics Information Disclosure Vulnerability

IBM Cognos Analytics formerly known as Cognos BI is a suite of business intelligence software from the American company IBM. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing key factors and key stakeholders. An informatio...

Code injection

IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824...

CVE-2017-1779

IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824...

CVE-2017-1779

IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824...

CVE-2017-1779

IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824...

PT-2018-6574

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics version 11.0 Description: The issue allows a local user to obtain cached credentials that are stored locally. Recommendations: For IBM Cognos Analytics version 11.0, update to a version where this issue is resolved to...

After Installing Update 3, Enterprise Manager GUI shows Blank

Challenge After installing Veeam 9.5 Update 3 for Enterprise Manager, the GUI shows as blank and many buttons are also missing, such as adding a Veeam Server, or starting a collection task for the Veeam server. Reference Photo of Behavior: Cause This is a browser-related problem and is likely due...

Multiple CPUs - Information Leak Using Speculative Execution Exploit

Exploit for hardware platform in category dos / poc == INTRODUCTION == This is a bug report about a CPU security issue that affects processors by Intel, AMD and to some extent ARM. I have written a PoC for this issue that, when executed in userspace on an Intel Xeon CPU E5-1650 v3 machine with a...

MGASA-2017-0421 Updated sssd packages fix security vulnerability

SSSD stores its cached data in an LDAP like local database file using libldb. To lookup cached data LDAP search filters like 'objectClass=user name=username' are used. However, in sysdbsearchuserbyupnres, the input is not sanitized and allows to manipulate the search filter for cache lookups. Thi...

Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass Vulnerability

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1332 Windows: CiSetFileCache TOCTOU Security Feature Bypass Platform: Windows 10 10586/14393/10S not tested 8.1 Update 2 or Windows 7 Class: Security Feature Bypass Summary:...

Apple iOS Keyboard Suggestions Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.The Keyboard Suggestions component is one of the keyboard support components. A security vulnerability exists in the Keyboard Suggestions component in Apple iOS versions prior to 11, which stems from the iOS keyboard caching...

CVE-2017-15361

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module TPM firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various...

CVE-2017-14737

A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key...

CVE-2017-14737

A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key...