6452 matches found
PT-2019-11969 · Grandstream · Grandstream Gwn7000
Name of the Vulnerable Software and Affected Versions: Grandstream GWN7000 versions prior to 1.0.6.32 Description: The issue allows remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a "/ubus/uci.apply" update nds webroot from tmp API call...
CVE-2019-10044
Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if for example Latin and Cyrillic characters...
CVE-2019-7613
Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event...
OPENSUSE-SU-2019:0143-1 Security update for python-python-gnupg
This update for python-python-gnupg to version 0.4.4 fixes the following issues: Security issue fixed: - CVE-2019-6690: Added a check to disallow certain control characters '\r', '\n', NUL in passphrases boo1123498...
FTPGetter Standard 5.97.0.177 - Remote Code Execution
FTPGetter Standard 5.97.0.177 - Remote Code Execution Exploit Title: FTPGetter Standard - v.5.97.0.177 Remote Code Execution Date: 05/03/2019 Exploit Author: https://github.com/w4fz5uck5 | @w4fz5uck5 Vendor Homepage: https://www.ftpgetter.com Software Link:...
The vulnerability of the Omnibox component in the Google Chrome web browser, which allows a hacker to manipulate the content of the address bar
The vulnerability of the Omnibox component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...
The vulnerability of the URLFormatter component in the Google Chrome web browser allows a hacker to manipulate the content of the URL bar.
The vulnerability of the URLFormatter component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...
The vulnerability of the URLFormatter component in the Google Chrome web browser allows a hacker to manipulate the content of the URL bar.
The vulnerability of the URLFormatter component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...
The vulnerability of the Omnibox component in the Google Chrome web browser, which allows a hacker to manipulate the content of the address bar
The vulnerability of the Omnibox component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...
[slackware-security] infozip
New infozip packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/infozip-6.0-i586-4slack14.2.txz: Rebuilt. Added some patches that should fix extracting archives with non-latin characte...
X (Formerly Twitter): url that twitter mobile site can not load
Summary: A url that twitter mobile site can not load, crushes any page containing this url Description: Invalid hex characters crushes twitter mobile site as example go to https://mobile.twitter.com/?%xx twitter won't load. 1 Sending such url on a direct message, twitter will no longer be able to...
OPENSUSE-SU-2019:0239-1 Security update for python-python-gnupg
This update for python-python-gnupg to version 0.4.4 fixes the following issues: Security issue fixed: - CVE-2019-6690: Added a check to disallow certain control characters '\r', '\n', NUL in passphrases boo1123498. This update was imported from the openSUSE:Leap:15.0:Update update project...
Malwarebytes Anti-Malware URI Handler Remote Command Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Anti-Malware. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handles URIs...
DEBIAN-CVE-2019-5781
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...
DEBIAN-CVE-2019-5776
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...
DEBIAN-CVE-2019-5775
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...
chromium-browser: Insufficient policy enforcement in Omnibox
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...
chromium-browser: Insufficient policy enforcement in Omnibox
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...
IP-Tools 2.5 - Log to file Local Buffer Overflow (SEH) (Egghunter)
IP-Tools 2.5 - Log to file Local Buffer Overflow SEH Egghunter !/usr/bin/env python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: IP-Tools 2.5 - Local Buffer OverflowEggHunter Date: 2019-02-06 Author:...
IP-Tools 2.5 Local Buffer Overflow
!/usr/bin/env python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: IP-Tools 2.5 - Local Buffer OverflowEggHunter Date: 2019-02-06 Author: Juan Prescotto Tested Against: Win7 Pro SP1 64 bit Software...