3333 matches found
Free MP3 CD Ripper 2.8 - Multiple File Buffer Overflow (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Free MP3 CD Ripper 2.6 %q This module exploits a buffer overflow in Free MP3 CD Ripper versions 2.6 and 2.8. By constructing a specially crafted...
Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2020 - Includes Oracle Apr 2020 CPU minus CVE-2020-2773 affects IBM MQ
Summary There are multiple vulnerabilities in IBM Runtime Environment Java Version 7 and 8 used by IBM MQ. IBM MQ have addressed the applicable CVEs. These issues were disclosed as part of the IBM Java SDK updates in April 2020. Vulnerability Details CVEID: CVE-2020-2781 DESCRIPTION: An unspecifi...
CVE-2020-4592
IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corruption attack due to an error when using segmented messages...
CVE-2020-4592
IBM MQ vulnerability CVE-2020-4592 affects IBM MQ Appliance and related MQ offerings. A data corruption issue can be triggered by an authenticated user under nondefault configuration due to an error in the segmented messages handling in the queue manager processing logic. Affected products includ...
Leonidas - Automated Attack Simulation In The Cloud, Complete With Detection Use Cases
Leonidas is a framework for executing attacker actions in the cloud. It provides a YAML-based format for defining cloud attacker tactics, techniques and procedures TTPs and their associated detection properties. These definitions can then be compiled into: A web API exposing each test case as an...
ALSA-2020:4443 Moderate: libarchive security update
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...
[SECURITY] Fedora 32 Update: calamares-3.2.11-14.fc32
Calamares is a distribution-independent installer framework, designed to in stall from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working...
Fedora: Security Advisory for calamares (FEDORA-2020-73471e6414)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Command Execution Vulnerability in CAJViewer of China Academic Journals (CD-ROM Version) Electronic Magazine Company Limited (CNVD-2020-61898)
caj reader CAJViewer is a specialized browser for reading and editing literature in the CNKI series of databases. A command execution vulnerability exists in CAJViewer of China Academic Journals CD-ROM Version Electronic Magazine Company Limited, which can be exploited by an attacker to obtain...
Command Execution Vulnerability in CAJViewer of China Academic Journals (CD-ROM Version) Electronic Magazine Company Limited (CNVD-2020-61894)
CAJViewer is a specialized viewer for reading and editing literature in the CNKI series of databases. A command execution vulnerability exists in CAJViewer of China Academic Journals CD-ROM Version Electronic Magazine Co. Ltd. that can be exploited by an attacker to gain control of the server...
The vulnerability of the eval function in the cd-messenger software lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.
The vulnerability of the eval function in the cd-messenger software exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Security Bulletin: IBM MQ Appliance is affected by an information disclosure vulnerability (CVE-2020-4528)
Summary IBM MQ Appliance has resolved an information disclosure vulnerability. Vulnerability Details CVEID: CVE-2020-4528 DESCRIPTION: IBM MQ Appliance could allow a local user, under special conditions, to obtain highly sensitive information from log files. CVSS Base score: 5.9 CVSS Temporal...
cd-hfmy.com Cross Site Scripting vulnerability OBB-1403414
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale
Microsoft is dedicated to working with the community and our customers to continuously improve and tune our platform and products to help defend against the dynamic and sophisticated threat landscape. Earlier this year, we announced that we would replace the existing software testing experience...
cd-down.com Cross Site Scripting vulnerability OBB-1272610
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
cd-maximum.ru Cross Site Scripting vulnerability OBB-1266272
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: IBM Cloud Private is vulnerable to IBM WebSphere Application Server Liberty vulnerabilities (CVE-2020-4303, CVE-2020-4304)
Summary IBM Cloud Private is vulnerable to IBM WebSphere Application Server Liberty vulnerabilities Vulnerability Details CVEID: CVE-2020-4303 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users t...
Secure and Integrate Your Azure DevOps CI/CD Pipeline
Explore experiments from Chuck Losh, Solution Architect, to explore how Application Security can help protect your applications at runtime as they are built, and integrate with your automated Azure DevOps CI/CD pipeline with automated testing...
