BMC Control-M/Agent Buffer Overflow Vulnerability

Control-M is one of BMC's most important automation control products, and is the world's leading integrated business scheduling solution for cross-platform and cross-application job scheduling. A buffer overflow vulnerability exists in BMC Control-M/Agent when the On-Do action destination is Mail...

CVE-2019-19215

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...

PT-2020-10095

Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent version 7.0.00.000 Description A buffer overflow issue exists when the On-Do action destination is set to Mail and the Control-M/Agent is configured to send emails. This allows remote attackers to have an unspecified impact...

The vulnerability of the do_core_note function in the File type detection utility allows a attacker to cause a service failure.

The vulnerability of the docorenote function in the File type detection utility is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Malicious Package

Overview a14z6ch-elapseddays is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview active-modeltypevalidator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

holz-becker.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1142773 Security Researcher Hchabik Helped patch 2358 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting holz-becker.com website and...

Privacy Badger - A Browser Extension That Automatically Learns To Block Invisible Trackers

Privacy Badger is a browser extension that automatically learns to block invisible trackers. Instead of keeping lists of what to block, Privacy Badger learns by watching which domains appear to be tracking you as you browse the Web. Privacy Badger sends the Do Not Track signal with your browsing...

ICU: Integer overflow in UnicodeString::doAppend()

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

PT-2020-5303

Name of the Vulnerable Software and Affected Versions D-Link DSL-2640B versions prior to the fixed version Description The issue is caused by a stack-based buffer overflow in the do cgi function, which processes CGI requests supplied to the device's web server. This can be exploited remotely,...

PT-2020-2103

Name of the Vulnerable Software and Affected Versions Mozilla Bleach versions prior to 3.12 Description A mutation XSS issue affects users calling bleach.clean with specific settings, including whitelisting svg or math tags, allowing RCDATA tags, and setting the strip keyword argument to False...

SQL injection vulnerability in the ne***_sh***.php page of the Handan Love Help You Do website building system

Handan Love Helps You Do is the first serious and professional marriage agency in Handan. SQL injection vulnerability exists in the nesh.php page of the Handan Love Help You Do website building system, which can be exploited by attackers to obtain sensitive information from the database...

The vulnerability of the rtl8139_do_receive function in the QEMU hardware emulation software, related to integer overflow, allows a hacker to cause a service failure.

The vulnerability of the rtl8139doreceive function in the QEMU hardware emulation software is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2014-7236: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome...

PT-2020-7732

Name of the Vulnerable Software and Affected Versions TWiki versions prior to 6.0.1 Description The issue allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to the API endpoint "do/view/Main/WebHome". Recommendations For versions prior to 6.0.1, update to...

CVE-2019-20454

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. T...

Linux kernel post-release reuse vulnerability (CNVD-2020-04531)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in the vcdoresize function in drivers/tty/vt/vt.c in Linux kernel 5.5.2 and...

DEBIAN-CVE-2020-8647

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vcdoresize function in drivers/tty/vt/vt.c...

UBUNTU-CVE-2020-8647

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vcdoresize function in drivers/tty/vt/vt.c...

PT-2020-6805

Name of the Vulnerable Software and Affected Versions Das U-Boot versions through 2020.01 Description A double free issue has been found in the do rename gpt parts function, located in cmd/gpt.c. This issue may result in a write-what-where condition, allowing an attacker to execute arbitrary code...