CVE-2018-11846

The CVE-2018-11846 entry affects Snapdragon Mobile: SD 210/SD 212/SD 205, SD 845, and SD 850. The root cause is a non-time-constant memory comparison operation that can create timing/side-channel attacks. Exploitation details are not provided in the documents; there is no public exploit informati...

UBUNTU-CVE-2018-16395

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one...

Moderate severity vulnerability that affects org.apache.mesos:mesos

Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token JWT. In Apache Mesos versions pre-1.4.2, 1.5.0, 1.5.1, 1.6.0 the comparison of the generated HMAC value against the provided signature in the JWT implementation used is vulnerable to a timi...

Comparison errorr in org.apache.tika:tika-core

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser...

GHSA-J53J-GMR9-H8G3 Comparison errorr in org.apache.tika:tika-core

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser...

Incorrect value comparison in Ruby openssl

An issue was discovered in the OpenSSL library in Ruby when two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one...

GHSA-PGV6-JRVV-75JP Moderate severity vulnerability that affects send

Withdrawn, accidental duplicate publish. visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public"...

Terahertz Millimeter-Wave Scanners

Interesting article on terahertz millimeter-wave scanners and their uses to detect terrorist bombers. The heart of the device is a block of electronics about the size of a 1990s tower personal computer. It comes housed in a musician's black case, akin to the one Spinal Tap might use on tour. At t...

Timing Attack

passport-local-mongoose is vulnerable to timing attack. The attack exists because password comparison function does not use a secure constant time comparison, allowing the attacker to guess the password...

x.chip.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-680499 Description| Value ---|--- Affected Website:| x.chip.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Apache Mesos Information Disclosure Vulnerability

Apache Mesos is the United States Apache Apache Software Foundation of a set of support for Hadoop, ElasticSearch and Spark and other application architecture of open source cluster management software. A security vulnerability exists in the comparison of the HMAC values generated in Apache Mesos...

End of support for Office 2016 and Office 2019

None None...

Comparison of Open Source Adversary Emulation Tools

PenTestIT RSS Feed If you liked my older post titled "List of Adversary Emulation Tools", I am sure you must want to know what is the difference or comparison between the different tools. This post is an attempt to do just that -to list down the comparison of open source adversary emulation tools...

CVE-2018-9363

A buffer overflow due to a singed-unsigned comparsion was found in hidpprocessreport in the net/bluetooth/hidp/core.c in the Linux kernel. The buffer length is an unsigned int but gets cast to a signed int which in certain conditions can lead to a system panic and a denial-of-service...

Timing Attacks

Stripe.net is vulnerable to timing attacks. The vulnerability exists due to the usage of non-constant time comparison methods, which causes information to be revealed through different time taken when comparing signatures...

Wayland wl_connection_demarshal() Out-Of-Bounds Memory Access

Wayland: out-of-bounds memory access in wlconnectiondemarshal on 32-bit systems In wlconnectiondemarshal, incoming strings are parsed as follows: // audit note: length is a u32 // audit note: p points to raw incoming u32 length = p++; if length == 0 closure-argsi.s = NULL; break; // audit note:...

Timing Attack

BCrypt.Net-Core is vulnerable to timing attacks. The library does not compare the password hash in constant time, allowing a malicious user to use the timing of the request to progressively identify a valid hash...

Remote Security Bypass

libcurl.so is vulnerable to remote security bypass attacks. The vulnerability exists due to a flaw of case insensitive password comparisons such that an attacker with the correct case insensitive password would be authorized...

SUSE-SU-2018:2165-1 Security update for polkit

This update for polkit fixes the following issues: Security issue fixed: - CVE-2018-1116: Fix uid comparison lacking in polkitbackendinteractiveauthoritycheckauthorization bsc1099031...

SUSE-SU-2018:2163-1 Security update for polkit

This update for polkit fixes the following issues: Security issue fixed: - CVE-2018-1116: Fix uid comparison lacking in polkitbackendinteractiveauthoritycheckauthorization bsc1099031...