495 matches found
CVE-2021-33564
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...
Design/Logic Flaw
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...
CVE-2021-33564
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...
CVE-2021-33564
Summary: CVE-2021-33564 affects the Dragonfly Ruby Gem prior to 1.4.0. An argument injection flaw allows remote attackers to read and write arbitrary files via a crafted URL when the verify_url option is disabled, potentially enabling arbitrary code execution. The root cause is described as misha...
Dragonfly Ruby Gem File Disclosure
File disclosure vulnerability in Dragonfly Ruby gem Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Exploit for Argument Injection in Dragonfly_Project Dragonfly
CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument...
Exploit for Argument Injection in Dragonfly_Project Dragonfly
CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument...
dragonfly -- argument injection
NVD reports: An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process...
dragonfly:cdn_fuzz: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6557587282329600 Project: dragonfly Fuzzing Engine: libFuzzer Fuzz Target: cdnfuzz Job Type: libfuzzerasandragonfly Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000642c Crash State: NULL Sanitizer: address ASAN Recommended...
Denial of Service Vulnerability in Dragonfly FM App
Dragonfly FM is a web-based audio application. A denial of service vulnerability exists in Dragonfly FM App, which can be exploited by an attacker to cause the program to stop running...
Malicious Package
Overview dragonflycloudinary-datastore is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid usi...
Malicious Package
Overview dragonflyactiverecord is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...
Debian DSA-4538-1 : wpa - security update
Two vulnerabilities were found in the WPA protocol implementation found in wpasupplication station and hostapd access point. - CVE-2019-13377 A timing-based side-channel attack against WPA3's Dragonfly handshake when using Brainpool curves could be used by an attacker to retrieve the password. -...
[SECURITY] [DSA 4538-1] wpa security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4538-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 29, 2019 https://www.debian.org/security/faq -...
Wi-Fi security the future: assessment WPA3 vulnerability in-vulnerability warning-the black bar safety net
Recently, a security research expert Matty Vanhoef and Eyal Ronen on the WPA3 Wi-Fi standards, conducted a safety analysis, and success from which to discover the five security vulnerabilities. Wherein, there are four security vulnerabilities will seriously affect Internet Security, then the next...
Vulnerabilities in the WPA3 Wi-Fi Security Protocol
Researchers have found several vulnerabilities in the WPA3 Wi-Fi security protocol: The design flaws we discovered can be divided in two categories. The first category consists of downgrade attacks against WPA3-capable devices, and the second category consists of weaknesses in the Dragonfly...
Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password
🔥 Breaking — It has been close to just one year since the launch of next-generation Wi-Fi security standard WPA3 and researchers have unveiled several serious vulnerabilities in the wireless security protocol that could allow attackers to recover the password of the Wi-Fi network. WPA, or Wi-Fi...
Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password
🔥 Breaking — It has been close to just one year since the launch of next-generation Wi-Fi security standard WPA3 and researchers have unveiled several serious vulnerabilities in the wireless security protocol that could allow attackers to recover the password of the Wi-Fi network. WPA, or Wi-Fi...
SUSE SLES12 Security Update : slurm (SUSE-SU-2017:3311-1)
This update for slurm fixes the following issues: Slurm was updated to 17.02.9 to fix a security bug, bringing new features and bugfixes fate323998 bsc1067580. Security issue fixed : - CVE-2017-15566: Fix security issue in Prolog and Epilog by always prepending SPANK to all user-set environment...
Google Secretly Planning to Launch a Censored Search Engine in China
After an eight-year-long absence from the most populated country in the world, Google search is going to dramatically make a comeback in China. Google is reportedly planning to launch a censored version of its search engine in China that is going to blacklist certain websites and search terms to...