389 matches found
Double-Stuffed: Dunkin’ Hit by Another Credential-Stuffing Attack
Dunkin’ Donuts may have just launched its first double-filled doughnut, but another doubling up is not quite as tasty. The chain has suffered its second credential-stuffing attack in three months. Like the first incident, the attack targeted pastry aficionados that have DD Perks accounts, which i...
Hackers Breach Dunkin' Donuts Accounts in Credential Stuffing Attack
A credential stuffing attack has allowed hackers to take a big bite out of Dunkin’ Donuts customer data. The donut giant announced Tuesday evening that a data breach in October may have led to customers’ personal information being compromised. Dunkin’ Brands Inc. in an advisory posted to its...
udisks2 2.8.0 - Denial of Service (PoC)
Exploit: udisks2 2.8.0 - Denial of Service PoC Author: oxagast Date: 2018-09-22 Vendor Homepage: http://storaged.org/ Software Link: https://github.com/storaged-project/udisks Version: =udisks2 2.8.0 Tested on: Ubuntu x64 / / / \ / / / O / / \ \ /\//\// ========The vulnerable section of code...
Linux ext4: out-of-bounds memcpy via non-inline system.data xattr(CVE-2018-11412)
ext4 can store data for small regular files as "inline data", meaning that the data is stored inside the corresponding inode instead of in separate blocks. Inline data is stored in two places: The first 60 bytes go in the iblock field in the inode which normally contains a list of blocks instead,...
Linux Kernel 4.16.11 - ext4_read_inline_data() Memory Corruption
Linux Kernel 4.16.11 - ext4readinlinedata Memory Corruption ext4 can store data for small regular files as "inline data", meaning that the data is stored inside the corresponding inode instead of in separate blocks. Inline data is stored in two places: The first 60 bytes go in the iblock field in...
secure.dd-wrt.com XSS vulnerability
Open Bug Bounty ID: OBB-551288 Description| Value ---|--- Affected Website:| secure.dd-wrt.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-14385
The CVE affects EMC Data Domain DD OS and EMC Data Domain Virtual Edition. A memory overflow vulnerability in SMBv1 exists in DD OS across multiple families, including 5.7 (<5.7.5.6), 6.0 (<6.0.2.9), 6.1 (<6.1.0.21), and all VE versions (2.0, 3.0 <3.0 SP2 Update 1, 3.1
mobile-dd.com XSS vulnerability
Open Bug Bounty ID: OBB-260216 Description| Value ---|--- Affected Website:| mobile-dd.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
dd-wrt.com XSS vulnerability
Open Bug Bounty ID: OBB-240960 Description| Value ---|--- Affected Website:| dd-wrt.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
Netgear Now Collects Router 'Analytics Data' — Here’s How to Disable It
Is your router collects data on your network? Netgear last week pushed out a firmware update for its wireless router model NightHawk R7000 with a remote data collection feature that collects router's analytics data and sends it to the company's server. For now, the company has rolled out the...
MySQL Cluster 7.3.x < 7.3.17 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)
The version of MySQL Cluster running on the remote host is 7.3.x prior to 7.3.17. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...
MySQL Cluster 7.5.x < 7.5.6 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)
The version of MySQL Cluster running on the remote host is 7.5.x prior to 7.5.6. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...
DD replication causes panic error on the target Data Domain server
Challenge You have configured a Data Domain Storage Unit as a Veeam backup repository using MTree replication. Data Domain replication results in PANIC on the target Data Domain storage. Cause Veeam Backup & Replication leverages the Virtual Synthetic VS feature of the DD Boost library for buildi...
CVE-2016-8216
EMC Data Domain OS (DD OS) exposes a local command injection vulnerability tracked as CVE-2016-8216. Affected are DD OS 5.4 across all versions, 5.5 family prior to 5.5.5.0, 5.6 family prior to 5.6.2.0, and 5.7 family prior to 5.7.2.10. The issue allows a local attacker to bypass the Data Domain ...
Hardcoded credentials
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to tags...
CVE-2016-9435
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to tags...
UBUNTU-CVE-2016-9435
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to tags...
CVE-2016-9435
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to tags...
Measure storage performance on XenServer using dd ?
dd is a native linux command also available on XenServer that can be used to measure the performance of a block device like /dev/sda at a block level. We can use this command to troubleshoot storage performance issues within the Host as well as the guest while clubbing it with other tools like...
