2781 matches found
Quick Wins to Combat Data Leaks
Data leakage is a worry. Holding lots of sensitive information about your employees and your customers means that if data is exposed it would be a catastrophe. No one wants to be the next Mossack Fonseca, or Equifax, or Marriott Hotel, or Facebook, or… The majority of clients I speak to tell me...
SQL Injection Vulnerability in School Worry-Free Teacher Evaluation System
The Schoolfree Teacher Evaluation System is a school teaching management system. A SQL injection vulnerability exists in SchoolWorryFree Teacher Evaluation System, which can be exploited by attackers to obtain sensitive information from the database...
Command Execution Vulnerability in School-Free Teacher Evaluation System
The Schoolfree Teacher Evaluation System is a school teaching management system. A command execution vulnerability exists in SchoolWorryFree Teacher Evaluation System, which can be exploited by an attacker to execute malicious commands...
Arbitrary File Download Vulnerability in School Worry-Free Teacher Evaluation System
The Schoolfree Teacher Evaluation System is a school teaching management system. There is an arbitrary file download vulnerability in the System, which can be exploited by an attacker to download the website database and obtain sensitive information in the database...
Netwide Assembler Buffer Overflow Vulnerability (CNVD-2020-02979)
Netwide Assembler NASM is a Linux-based assembler. The product is capable of creating binaries and writing bootloaders. A buffer overflow vulnerability exists in the expr function of the asm/eval.c file in version 2.14.02 of Netwide Assembler NASM. The vulnerability stems from a networked system ...
PT-2019-14709 · Jenkins · Jenkins Build Failure Analyzer Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Build Failure Analyzer Plugin versions 1.24.1 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression...
Cross-Site Scripting (XSS)
rack-mini-profiler is vulnerable to cross-site scripting XSS. The vulnerability exists through the value of the query in timerstruct/sql.rb where a prepared SQL query can be evaluated and rendered as Javascript...
Siemens SCALANCE Privilege Escalation Vulnerabilities (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely; low skill level to exploit Vendor: Siemens Equipment: SCALANCE X-200 switch family and SCALANCE X-200IRT switch family Vulnerabilities: Privilege Escalation, Improper Authentication 2. UPDATE INFORMATION This updated advisory is a...
Remote Code Execution (RCE)
vm2 is vulnerable to remote code execution RCE. The attack is possible due to the generation of RangeError when a Maximum call stack size is exceeded during the sandboxing of the evaluation of code used within the eval function...
Remote Code Execution (RCE)
safer-eval is vulnerable to remote code execution RCE. The attack is possible due to the generation of RangeError when a Maximum call stack size is exceeded during the sandboxing of the evaluation of code used within the eval function...
SYS.2.2.2.A3
Ziel des Bausteins SYS.2.2.2 ist der Schutz von Informationen, die durch und auf Windows 8.1-Clients verarbeiten werden. Die Basis-Anforderung Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
Design/Logic Flaw
safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError...
CVE-2019-10769
The provided data indicates CVE-2019-10769 affects the npm package safer-eval, which sandboxed evaluation uses the eval function. The vulnerability is described as Arbitrary Code Execution via generating a RangeError, with a detailed PoC published in the Huntr entry for safer-eval (1-NPM-SAFER-EV...
CORStest - A Simple CORS Misconfiguration Scanner
A simple CORSmisconfiguration scanner Based on theresearch of James Kettle CORStest is a quick & dirty Python 2 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following potential...
November 19, 2019—KB4525252 (Preview of Monthly Rollup)
None None...
Podcast: Managing an Out-Of-Control Security Tech Stack
This podcast is sponsored by Arctic Wolf. In this sponsored podcast, Threatpost podcast host Cody Hackett and Sam McLane, chief technology officer with Arctic Wolf, discuss important considerations when building a multi-layered cybersecurity strategy and best practices when evaluating security...
Sandbox Breakout / Arbitrary Code Execution
Overview All versions of @zhaoyao91/eval-in-vm are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor . This may allow attackers to execute arbitrary code in the system. Evaluating the payloa...
ansible: unsafe template evaluation of returned module data can lead to information disclosure
A flaw was discovered in the way Ansible templating was implemented, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed...
LibSass Uncontrolled Recursion Vulnerability
LibSass is a C/C++ implementation of the Sass compiler. An uncontrolled recursion vulnerability exists in Sass::Eval::operator in eval.cpp in LibSass 3.6.1. No detailed vulnerability details are provided at this time...
