The vulnerability in the StaxParserUtil class of Picketlink software for managing security and application identification in Java applications allows a perpetrator to disclose protected information.

The vulnerability of the StaxParserUtil class in Picketlink software for managing security and application identification in Java applications is related to deficiencies in the processing of input data during SAML message analysis. Exploiting this vulnerability allows a malicious actor to disclos...

The vulnerability of the Junos operating system, related to incorrect data processing, allows a perpetrator to trigger a service failure.

The vulnerability of the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to a failure in the routing daemon process rpd...

Google fined $57 million by France for lack of transparency and consent

The French data protection watchdog CNIL has issued its first fine of €50 million around $57 million under the European Union's new General Data Protection Regulation GDPR law that came into force in May last year. The fine has been levied on Google for "lack of transparency, inadequate informati...

modulemd uses an unsafe function for processing externally provided data

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution...

Remote code execution

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution...

PYSEC-2019-153

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution...

The vulnerability of the Word text editor, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Word text editor is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

FasterXML Jackson-databind Code Issue Vulnerability

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . Jackson-databind is one of the components with data binding capabilities . A security vulnerability exists in FasterXML Jackson-databind version 2.x prior to 2.9.8. An attacker can exploit the vulnerability to execute...

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Excel spreadsheet editors, related to data processing errors, allows attackers to execute arbitrary code.

The vulnerability of Excel spreadsheet editors is related to data processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of the GraphicBuffer::unflatten() function in the Android operating system, allowing attackers to escalate their privileges

The vulnerability of the GraphicBuffer::unflatten function in the Android operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the embedded SQL database SQLite, related to deficiencies in input data processing, allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the embedded SQL database SQLite is related to deficiencies in data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures by using specially crafted SQL queries...

Xxe

IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150170...

Mozilla Firefox 63.0.1 - Denial of Service (PoC)

Exploit Title: Mozilla Firefox 63.0.1 - Denial of Service PoC Date: 2018-11-29 Exploit Author: SAIKUMAR CHEBROLU Vendor Homepage: https://www.mozilla.org/en-US/firefox/new/ Bugzilla report: https://bugzilla.mozilla.org/showbug.cgi?id=1504512 Version: Firefox 63.0.1 Tested on: Windows 10 CVE : No...

The vulnerability in the web interface of the Cisco Prime Collaboration Assurance software for managing unified communications is caused by errors in processing input data, allowing a hacker to re-record files in the file system.

The vulnerability of the Cisco Prime Collaboration Assurance software management interface arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to re-record files in the file system...

Microsoft Word doc File Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of Junos Operating System’s Routing Protocol Daemon (RPD) allows a hacker to execute arbitrary code.

The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending multiple specially crafted MPLS packets within a short period of time...

F5 Networks BIG-IP : BIG-IP ASM data processing vulnerability (K38243073)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.3 / 12.1.3.2 / 13.1.0. It is, therefore, affected by a vulnerability as referenced in the K38243073 advisory. - On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may...

Facebook Fined £500,000 for Cambridge Analytica Data Scandal

Facebook has finally been slapped with its first fine of £500,000 for allowing political consultancy firm Cambridge Analytica to improperly gather and misuse data of 87 million users. The fine has been imposed by the UK's Information Commissioner's Office ICO and was calculated using the UK's old...

Nameles - Open Source Entropy Based Invalid Traffic Detection And Pre-Bid Filtering

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. For a high level overview you might want to check out the website If you have any questions or...