1204 matches found
CVE-2017-14385
An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual...
CVE-2017-5260
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the 'user' account, the configuration file is accessible via direct object reference DRO at...
PT-2017-16428
Name of the Vulnerable Software and Affected Versions Cambium Networks cnPilot firmware versions 4.3.2-R4 and prior Description The issue allows a low-privilege 'user' account to access the configuration file via direct object reference DOR at the "http:///goform/down cfg file" endpoint, despite...
PT-2017-19125
Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to a race condition in the camera driver. Specifically, the functio...
CVE-2017-15699
A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vulnerability, a remote user must be able to establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame which will cause it to segfault and...
JAWS/1.0 RCE Vulnerability
The JAWS/1.0 web server is prone to a remote command execution RCE vulnerability. This VT has been deprecated as the flaw is already covered by the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...
CVE-2017-1000253
Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 committed on April 14, 2015. This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 backported to Linux 3.10.7...
PT-2017-3113
Name of the Vulnerable Software and Affected Versions SAP POS Xpress Server affected versions not specified Description The issue is related to the lack of authentication procedures in the Xpress Server component of SAP POS software. This allows a remote attacker to read and erase files, shut dow...
YouTube MP3 Converter Site Shut Down After Labels Win Lawsuit
By Waqas In 2016, Youtube-mp3.org YTMP3, a popular YouTube-ripping site was taken to court by Recording This is a post from HackRead.com Read the original post: YouTube MP3 Converter Site Shut Down After Labels Win Lawsuit...
istheservicedown.co.uk XSS vulnerability
Vulnerable URL: https://istheservicedown.co.uk/search?q=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
Blizzard Entertainment Hit With Weekend DDoS Attack
Blizzard Entertainment reported a crippling DDoS attack over the weekend creating chronic latency and connection issues for players of games Overwatch, World of Warcraft and others. The DDoS attack has since subsided, according to Blizzard, but users are still grousing on Twitter over lingering...
Overwatch DOWN as Blizzard servers facing technical problems
By Agan Uzunovic The official Twitter account of Blizzard Customer Support has revealed that This is a post from HackRead.com Read the original post: Overwatch DOWN as Blizzard servers facing technical problems...
rai-hotelservice.com XSS vulnerability
Vulnerable URL: https://www.rai-hotelservice.com/compass/external/index.cfm?fuseaction=dsphoteldrilldown...
Home Web Server 1.9.1 (build 164) - Remote Code Execution
Home Web Server 1.9.1 build 164 - Remote Code Execution Exploit Title: Home Web Server 1.9.1 build 164 - CGI Remote Code Execution Date: 26/05/2017 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor...
Microsoft Windows MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption Exploit
This Metasploit module is a port of the Equation Group ETERNALBLUE exploit, part of the FuzzBunch toolkit released by Shadow Brokers. There is a buffer overflow memmove operation in Srv!SrvOs2FeaToNt. The size is calculated in Srv!SrvOs2FeaListSizeToNt, with mathematical error where a DWORD is...
You are not alone; WhatsApp is down for many (Updated)
By Carolina If you are wondering whats going on with the popular messenger app WhatsApp then you are not alone because its service is down in many countries. Although it is unclear whats going on and why the service is down theres a massive number of users complaining on Twitter. WhatsApp users i...
Microsoft is Shutting Down CodePlex, Asks Devs To Move To GitHub
Microsoft has announced to shut down CodePlex -- its website for hosting repositories of open-source software projects -- on December 15, 2017. Launched in 2006, CodePlex was one of the Microsoft's biggest steps towards the world of open source community -- where any programmer, anywhere can shar...
Important: Red Hat Security Advisory: qemu-kvm security and bug fix update
An update for qemu-kvm is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Design/Logic Flaw
IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTTP requests. IBM Reference : 1998648...