Lucene search
+L

6110 matches found

AlmaLinux
AlmaLinux
•added 2019/11/05 5:46 p.m.•24 views

new packages: gcc-toolset-9-elfutils

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-elfutils packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC...

3AI score
SaveExploits0References1
OSV
OSV
•added 2019/11/05 5:46 p.m.•21 views

ALEA-2019:3443 new packages: gcc-toolset-9-elfutils

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-elfutils packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC...

7AI score
SaveExploits0References1
OSV
OSV
•added 2019/11/05 5:46 p.m.•14 views

ALBA-2019:3439 new packages: gcc-toolset-9-dwz

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-dwz packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/10/29 12:00 a.m.•64 views

The vulnerability of the ActUWzd.dll library component of the Mitsubishi MX Component 3 system for data collection and process control in industrial automation systems, allowing a hacker to execute arbitrary code.

The vulnerability of the ActUWzd.dll library component of the Mitsubishi MX Component 3 system used for data collection and process control in Citect SCADA is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using a long string...

10CVSS6.5AI score0.10771EPSS
SaveExploits2References4Affected Software2
Fedora
Fedora
•added 2019/10/27 2:05 a.m.•56 views

[SECURITY] Fedora 29 Update: libpcap-1.9.1-1.fc29

Libpcap provides a portable framework for low-level network monitoring. Libpcap can provide network statistics collection, security monitoring and network debugging. Since almost every system vendor provides a different interface for packet capture, the libpcap authors created this...

7.8CVSS2.7AI score0.04436EPSS
SaveExploits0
ThreatPost
ThreatPost
•added 2019/10/23 4:43 p.m.•55 views

ThreatList: Google's Advertising Network Dominates Global Data Collection

When it comes to data collection, Google’s combined arsenal of advertising tools and services continue to help it dominate at a global level. Close behind are AOL Advertising, Moat and AppNexus. Each are singled out by researchers in new report that brings to mind the privacy-busting quote, “If...

0.6AI score
SaveExploits0References11
Veracode
Veracode
•added 2019/10/21 5:29 a.m.•18 views

Denial Of Service (DoS)

mongodb is vulnerable to denial of service. Failure to properly catch an exception arising from an invalid collection name when a database does not exist results in an application crash...

2.4AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2019/10/18 7:01 p.m.•154 views

Execs Could Face Jail Time For Privacy Violations

A new data privacy bill threatens large tech firms, like Facebook, with tough penalties – including monetary fines and up to 20 years of jail time for executives – if they violate user privacy policies. The “Mind Your Own Business Act,” proposed by Sen. Ron Wyden D-Ore. on Thursday, gives the...

SaveExploits0References10
CNVD
CNVD
•added 2019/10/17 12:00 a.m.•13 views

WordPress history-collection plugin path traversal vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. history-collection is a history plugin used in it. A path traversal vulnerability exists in the WordPress history-collection plugi...

7.5CVSS6.7AI score0.04126EPSS
SaveExploits1References1
NVD
NVD
•added 2019/10/10 5:15 p.m.•24 views

CVE-2015-9470

The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter...

7.5CVSS7.7AI score0.04126EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2019/10/10 4:08 p.m.•29 views

CVE-2015-9470

The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter...

7.8AI score0.04126EPSS
SaveExploits1References2
CVE
CVE
•added 2019/10/10 4:08 p.m.•90 views

CVE-2015-9470

CVE-2015-9470 concerns the WordPress history-collection plugin (

7.5CVSS8.1AI score0.04126EPSS
SaveExploits1References2Affected Software1
Packet Storm
Packet Storm
•added 2019/10/04 12:00 a.m.•359 views

PHP 7.3 disable_functions Bypass

= 0; $j-- $address = 8; return $out; function write&$str, $p, $v, $n = 8 $i = 0; for$i = 0; $i = 8; function leak$addr, $p = 0, $s = 8 global $abc, $helper; write$abc, 0x68, $addr + $p - 0x10; $leak = strlen$helper-a; if$s != 8 $leak %= 2 $s 8 - 1; return $leak; function parseelf$base $etype =...

SaveExploits0
Kitploit
Kitploit
•added 2019/10/02 11:59 a.m.•299 views

Lockdoor Framework - A Penetration Testing Framework With Cyber Security Resources

Lockdoor Framework : A Penetration Testing Framework With Cyber Security Resources. 09/2019 : 1.0Beta Information Gathring Tools 21 Web Hacking Tools15 Reverse Engineering Tools 15 Exploitation Tools 6 Pentesting & Security Assessment Findings Report Templates 6 Password Attack Tools 4 Shell Tool...

7.5AI score
SaveExploits0References98
Schneier on Security
Schneier on Security
•added 2019/09/26 11:21 a.m.•78 views

On Chinese "Spy Trains"

The trade war with China has reached a new industry: subway cars. Congress is considering legislation that would prevent the world's largest train maker, the Chinese-owned CRRC Corporation, from competing on new contracts in the United States. Part of the reasoning behind this legislation is...

7.3AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2019/09/23 2:33 p.m.•101 views

Google Assistant Audio Privacy Controls Updated After Outcry

Google is unveiling new privacy controls for the Google Assistant virtual assistant, after the company came under fire earlier this year for eavesdropping on users’ personal audio snippets – without their permission. The tech giant on Monday promised more transparency around the audio data that i...

0.4AI score
SaveExploits0References15
Wired Threat Level
Wired Threat Level
•added 2019/09/23 7:01 a.m.•89 views

Google Tightens Its Voice Assistant Rules Amid Privacy Backlash

Following Apple, Amazon, and others, Google will put in new safeguards against accidental voice assistant collection and transcription...

4.3AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/19 12:00 a.m.•8 views

Cisco HyperFlex Software Data Forgery Issue Vulnerability

Cisco HyperFlex is Cisco's hyperconverged infrastructure HCI platform built to meet the needs of multi-cloud IT, supporting any application, anywhere, with a simple hyperconverged infrastructure. A counter value injection vulnerability exists in the Statistics Information Collection Service in...

5.3CVSS7.3AI score0.0065EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/18 5:15 p.m.•30 views

CVE-2019-12620

A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could explo...

5.3CVSS5.6AI score0.0065EPSS
SaveExploits0References1
Prion
Prion
•added 2019/09/18 5:15 p.m.•24 views

Authentication flaw

A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could explo...

5CVSS5.6AI score0.0065EPSS
SaveExploits0References1Affected Software5
Rows per page
Query Builder