1814 matches found
Chrome Debugger Arbitrary File Read / Arbitrary Web Request
This module uses the Chrome Debugger's API to read files off the remote file system, or to make web requests from a remote machine. Useful for cloud metadata endpoints! Module Options msf use auxiliary/gather/chrome/debugger msf undefineddebugger show actions ...actions... msf undefineddebugger s...
SUSE-SU-2019:2365-2 Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container bsc1145383...
The vulnerability of the GDB debugger’s module allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the GDB debugger’s gdb module relates to the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code or trigger a service failure using a specially created ELF file...
SUSE-SU-2019:2400-1 Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container bsc1145383...
openSUSE Security Update : python-Werkzeug (openSUSE-2019-2145)
This update for python-Werkzeug fixes the following issues : Security issue fixed : - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container bsc1145383. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Networ...
SUSE-SU-2019:2365-1 Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container bsc1145383...
SUSE-SU-2019:2358-1 Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container bsc1145383...
OPENSUSE-SU-2019:2118-1 Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container bsc1145383. This update was imported from the SUSE:SLE-15:Update update project...
Security update for python-Werkzeug (moderate)
openSUSE Security Update: Security update for python-Werkzeug Announcement ID: openSUSE-SU-2019:2118-1 Rating: moderate References: 1145383 Cross-References: CVE-2019-14806 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...
Fedora Update for seamonkey FEDORA-2019-e31c2f7d87
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for seamonkey FEDORA-2019-7f7489dc8c
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Quantopian: Cross-site scripting via hardcoded front-end watched expression.
Hello, favorite security team. This is so far most interesting XSS i've found on your website. And also this is 10th bug i report you, so im gonna celebrate. Summary: Via hardcoded front-end code in algo debugger one is able to execute XSS on algorithm collaborator. One is able to use python to...
Pallets Werkzeug Insufficient Entropy
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id...
Adobe Acrobat Reader DC for Windows - Double Free due to Malformed JP2 Stream
We have observed the following crash in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- ======================================= VERIFIER STOP 00000007: pid 0x2C1C: Heap block already freed. 0C441000 : Heap handle for the heap owning the...
CVE-2019-0349
SAP Kernel ABAP Debugger, versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to...
CVE-2019-0349
CVE-2019-0349 affects SAP Kernel (ABAP Debugger). The flaw allows a user to execute the Go to statement without the authorization S_DEVELOP_DEBUG_02, resulting in a Missing Authorization Check. Affected are SAP Kernel ABAP Debugger variants: KRNL32NUC/UC, KRNL64NUC/UC, across versions 7.21, 7.21E...
CVE-2019-0349: Missing Authorization
SAP Kernel ABAP Debugger, versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to...
PT-2019-4259
Name of the Vulnerable Software and Affected Versions SAP Kernel ABAP Debugger versions 7.21 through 7.77 Description The issue is caused by weaknesses in the authorization procedure of the ABAP Debugger. This allows a remote attacker to execute the "Go to statement" command without proper...