442 matches found
CVE-2017-1221
IBM Tivoli Endpoint Manager IBM BigFix 9.2 and 9.5 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
UBUNTU-CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
CVE-2017-7532
CVE-2017-7532 affects Moodle 3.x. The issue, described as: “In Moodle 3.x, course creators are able to change system default settings for courses,” indicates improper privilege handling that lets non‑administrative users alter default course configurations. CVSS information included with the entr...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
Fedora 26 : mediawiki (2017-05cb6287b7)
https://www.mediawiki.org/wiki/Releasenotes/1.28MediaWiki1.28.1 Changes since 1.28.0 - $wgRunJobsAsync is now false by default T142751. This change only affects wikis with $wgJobRunRate 0. - Fix fatal from 'WaitConditionLoop' not being found, experienced when a wiki has more than one database...
DEBIAN-CVE-2014-0225
When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack...
CVE-2016-8962
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...
cgPwn - Cyber Grand Pwnage Box
A lightweight VM for hardware hacking, RE fuzzing, symEx, exploiting etc and wargaming tasks. This is a Ubuntu VM tailored for hardware hacking, RE and Wargaming. Tools included Pwndbg Pwntools Binwalk Radare2 Capstone, Unicorn and Keystone Engines Qira Timeless Debugger AFL Valgrind , VGdb...
CVE-2016-8236
Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77...
CVE-2016-8236
The CVE-2016-8236 issue affects Lenovo ThinkServer systems with ThinkServer System Manager (TSM): RD350, RD450, RD550, RD650, and TD350. A prolonged broadcast storm on the local LAN can trigger a watchdog-driven reset to defaults, setting the TSM username/password to defaults and wiping configura...
CVE-2016-8236
Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77...
Inherent Risks of Using the Intelligent Platform Management Interface (IPMI) on the Lenovo System x Integrated Management Module (IMM), Integrated Management Module II (IMM2) and ThinkServer TSM - Lenovo Support US
No description provided...
Inherent Risks of Using the Intelligent Platform Management Interface (IPMI) on the Lenovo System x Integrated Management Module (IMM), Integrated Management Module II (IMM2) and ThinkServer TSM - us
Lenovo Security Advisory: LEN-10617 Potential Impact: Access to systems through IPMI if default settings are not changed Severity: High Scope of Impact: Industry-Wide CVE Identifiers: CVE-2013-4037, CVE-2013-4031 Summary Description: Various risks with the industry-standard Intelligent Platform...
Attacks On MongoDB Rise As Hijackings Continue
The number of insecure MongoDB databases being hijacked by criminals is growing according to experts who say attacks that began last week are now targeting more valuable assets. Since identifying attacks against MongoDB installations on Dec. 27, Victor Gevers, an ethical hacker and founder of GDI...
Toshiba FlashAir does not require authentication in "Internet pass-thru Mode"
Overview FlashAir by Toshiba Corporation is a SDHC memory card which provides "Internet pass-thru Mode", allowing devices to access the internet while connecting to FlashAir. When configured in "Internet pass-thru Mode", FlashAir acts both as a station and as an access point. When "Internet...
How to Use Middle Button Paste Between Linux VDA and Linux Receiver
Windows doesn’t support middle button paste while Linux supports this function. In Linux Receiver, we have option to support middle button past in Windows VDA which is enabled by default. Middle button paste doesn’t work correctly between Linux VDA and Linux Receiver by default settings...