5,000 Twitter Accounts Linked to Disinformation Campaigns

Twitter has removed six sets of accounts that the site has deemed to be devoted to coordinated, state-backed propaganda activities – totaling about 5,000 accounts in all. “We believe that people and organizations with the advantages of institutional power and which consciously abuse our service a...

Novatek NT9665X HFS Overwrite denial-of-service vulnerability

Summary An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version “RoavA1SWV1.9.” The HTTP server could allow an attacker to overwrite the root directory of the server, resulting in a denial of service. An attacker can send a...

Rockwell Automation 1771-DE firmware rev A General Purpose Analog I/O

Binary data 753451.prm...

Philips Tasy EMR (Update A)

1. EXECUTIVE SUMMARY --------- Begin Update A Part 1 of 7 --------- CVSS v3 4.3 ATTENTION: Low skill level to exploit --------- End Update A Part 1 of 7 --------- Vendor: Philips Equipment: Tasy EMR --------- Begin Update A Part 2 of 7 --------- Vulnerability: Cross-site Scripting, Information...

Security update for ucode-intel (moderate)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:1084-1 Rating: moderate References: 1129231 Affected Products: openSUSE Leap 15.0 An update that contains security fixes can now be installed. Description: This update for ucode-intel fixes the following...

Override access vulnerability in de*** module of LaySNS lightweight content community system of Wuhan ClassSen Technology

LaySNS is a lightweight, integrated content management and community interaction website management system based on ThinkPHP+Layui architecture. A vulnerability exists in the de module of the LaySNS lightweight content community system in Wuhan Classen Technology. The vulnerability stems from the...

SUSE SLED12 / SLES12 Security Update : ucode-intel (SUSE-SU-2019:0736-1)

This update for ucode-intel fixes the following issues : Updated to the 20190312 bundle release bsc1129231 New Platforms : AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile CFL-S P0 6-9e-c/22 000000a2 Core Gen9...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:0712-1)

This update for ucode-intel fixes the following issues : Updated to the 20190312 bundle release bsc1129231 New Platforms : AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile CFL-S P0 6-9e-c/22 000000a2 Core Gen9...

CVE-2019-6491

RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection...

CVE-2019-6491

RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection...

Sql injection

RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection...

CVE-2019-6491

CVE-2019-6491 affects RISI Gestao de Horarios v3201.09.08 rev.23 and is a SQL injection vulnerability. CVSSv3 base score 8.8 (HIGH): NETWORK, LOW attack complexity, PRIVs LOW, no user interaction; impacts Confidentiality, Integrity, Availability (HIGH). CVSSv2 base 6.5 (MEDIUM). No remediation de...

PT-2019-18114

Name of the Vulnerable Software and Affected Versions RISI Gestao de Horarios version 3201.09.08 rev.23 Description The issue allows SQL Injection, which can potentially be exploited to extract or modify sensitive data. Recommendations For version 3201.09.08 rev.23, update to a newer version that...

CVE-2019-6491: Improper Neutralization of Special Elements used in an SQL Command

RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection...

PT-2019-8983

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / S...

CVE-2019-0030: Use of a Broken or Risky Cryptographic Algorithm

Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3...

brandshop24.de XSS vulnerability

Open Bug Bounty ID: OBB-719889 Description| Value ---|--- Affected Website:| brandshop24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

bilan-de-comp XSS vulnerability

Open Bug Bounty ID: OBB-719809 Description| Value ---|--- Affected Website:| bilan-de-comp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

vergabe24.de XSS vulnerability

Open Bug Bounty ID: OBB-718908 Description| Value ---|--- Affected Website:| vergabe24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

saunaclub49.de XSS vulnerability

Open Bug Bounty ID: OBB-718798 Description| Value ---|--- Affected Website:| saunaclub49.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...