37 matches found
PT-2020-16291
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.13 Description The issue is related to the mishandling of file-extension dispatching, which can lead to code execution. Recommendations For versions prior to 88.0.13, update to version 88.0.13 or later to resolve...
CVE-2020-26108: Undefined Security Weakness
cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution SEC-488...
Amazon Delivery Drivers Hacking Scheduling System
Amazon drivers -- all gig workers who dont work for the company -- are hanging cell phones in trees near Amazon delivery stations, fooling the system into thinking that they are closer than they actually are: The phones in trees seem to serve as master devices that dispatch routes to multiple...
[SECURITY] Fedora 30 Update: python-slixmpp-1.4.2-1.fc30
Slixmpp is an MIT licensed XMPP library for Python 3.5+. It is a fork of SleekXMPP. Goals is to only rewrite the core of the library the low level socket handling, the timers, the events dispatching in order to remove all threads...
CVE-2019-14392
cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching SEC-501...
CVE-2019-14392
cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching SEC-501...
CVE-2019-14392
CVE-2019-14392 affects cPanel prior to 80.0.22, where incorrect URI dispatching enables remote code execution from a demo account (SEC-501). Impact: remote code execution with high severity; no in-wild exploit details provided in the sources. Remediation: upgrade to 80.0.22 or later. If known, ve...
CVE-2019-14392: Undefined Security Weakness
cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching SEC-501...
PT-2019-13661
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 80.0.22 Description The issue allows remote code execution by a demo account due to incorrect URI dispatching. Recommendations For versions prior to 80.0.22, update to version 80.0.22 or later to resolve the issue...
Fedora 27 : mozilla-noscript (2018-09c51bbcec)
Changes since 10.1.8.16: === v 10.1.9.6 ============================================================= - TB Gracefully handle legacy external message recipients - XSS Updated known HTML5 events - Better IPV6 support - UI support for protocol-only entries v 10.1.9.5...
SQL Injection Vulnerability in Shanghai Sizen GPS Global Positioning Monitoring and Dispatching System
Shanghai Sizen GPS Global Positioning Monitoring and Dispatching System is a set of integrated GPS, GIS, GPRS or CDMA1X and compatible with GSM technology to provide users with mobile target positioning, monitoring, scheduling, alarming, information communication and other services. SQL injection...
Apple Mac OSX - 'IOBluetoothHCIUserClient' Arbitrary Kernel Code Execution
/ Source: https://code.google.com/p/google-security-research/issues/detail?id=569 IOBluetoothHCIUserClient uses an IOCommandGate to dispatch external methods; it passes a pointer to the structInput of the external method as arg0 and ::SimpleDispatchWL as the Action. It neither passes nor checks t...
IBM Tivoli Storage Manager FastBack Server Opcode 8192 Stack Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 8192. By sending a crafted packet on TCP...
Concrete CMS: Local File Inclusion Vulnerability in Concrete5 version 5.7.3.1
Concrete5 is vulnerable to a Local File Inclusion because it fails to properly validate the path for incoming requests during the dispatching process. This vulnerability exists because the path is retrieved using the Request::getPathInfo method from the Symfony framework, which allows to specify...
[SECURITY] Fedora 19 Update: acpid-2.0.19-5.fc19
acpid is a daemon that dispatches ACPI events to user-space programs...
openSUSE: Security Advisory for libvirt (openSUSE-SU-2013:0274-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mozilla Products Multiple Vulnerabilities (Mar 2012) - Windows
Mozilla Firefox/Thunderbird/Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...