iTerm2 with tmux integration is vulnerable to remote command execution

Overview iTerm2, up to and including version 3.3.5, with tmux integration is vulnerable to remote command execution. Description iTerm2 is a popular terminal emulator for macOS that supports terminal multiplexing using tmux integration and is frequently used by developers and system administrator...

PT-2019-3850

Name of the Vulnerable Software and Affected Versions SIMATIC WinAC RTX F 2010 versions prior to SP3 Update 1 Description A vulnerability has been identified that could allow an unauthenticated attacker to trigger a denial-of-service condition by sending a large HTTP request to the executing...

Siemens Industrial Real-Time (IRT) Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SIMATIC WinAC RTX (F) 2010 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC WinAC RTX F 2010 --------- Begin Update A Part 1 of 4 --------- Vulnerability: Insufficient Resource Pool --------- End Update A Part 1 of 4 --------- 2. UPDATE...

B2R2 - Collection Of Useful Algorithms, Functions, And Tools For Binary Analysis

B2R2 is a collection of useful algorithms, functions, and tools for binary analysis , written purely in F in .NET lingo, it is purely managed code. B2R2 has been named after R2-D2, a famous fictional robot appeared in the Star Wars. In fact, B2R2's original name was B2-R2 , but we decided to use...

CVE-2018-16301

The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:readinfile. To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump...

Unspecified Vulnerability in Multiple F5 Products (CNVD-2019-37181)

F5 BIG-IP, etc. are all products of F5 Corporation in the U.S. F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 Enterprise Manager is an application delivery platform that provides a view of the enti...

S-CMS e-commerce system aj***.php page L_f*** parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page Lf parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

PT-2019-14764

Name of the Vulnerable Software and Affected Versions Gila CMS versions prior to 1.11.1 Description The issue allows directory traversal, leading to Local File Inclusion via the admin/fm/?f=../ endpoint. Recommendations For versions prior to 1.11.1, update to version 1.11.1 or later to resolve th...

PT-2019-4660

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.4 Description The issue is related to the fib6 rule lookup function in the Linux kernel, which mishandles the RT6 LOOKUP F DST NOREF flag in a reference-count decision. This can lead to a crash, as identified...

Fedora 29 : python38 (2019-d58eb75449)

This is a beta preview of Python 3.8 Python 3.8 is still in development. This release, 3.8.0b4 is the last of four planned beta release previews. Beta release previews are intended to give the wider community the opportunity to test new features and bug fixes and to prepare their projects to...

SQL injection vulnerability in the F***_cq*** parameter of the aj***.php page in the background of S-CMS government website builder system

S-CMS is a content management system CMS based on PHP and MySQL. There is a SQL injection vulnerability in the Fcq parameter on the aj.php page in the background of the S-CMS Government Building System, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2019-14755

The profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a File with a Dangerous Type...

Linux kernel resource management error vulnerability (CNVD-2019-32366)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the 'fmidisetalt' function in the drivers/usb/gadget/functions/fmidi.c file of the fmidi driver in versions of Linu...

DEBIAN-CVE-2019-14763

In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with fhid...

DEBIAN-CVE-2018-20961

In the Linux kernel before 4.16.4, a double free vulnerability in the fmidisetalt function of drivers/usb/gadget/function/fmidi.c in the fmidi driver may allow attackers to cause a denial of service or possibly have unspecified other impact...

UBUNTU-CVE-2018-20961

In the Linux kernel before 4.16.4, a double free vulnerability in the fmidisetalt function of drivers/usb/gadget/function/fmidi.c in the fmidi driver may allow attackers to cause a denial of service or possibly have unspecified other impact...

UBUNTU-CVE-2019-14763

In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with fhid...

Path Traversal

Overview All versions of f-serv are vulnerable to Path Traversal. Due to insufficient input sanitization in URLs, attackers can access server files by using relative paths when fetching files. Recommendation No fix is currently available. Consider using an alternative package until a fix is made...

UBUNTU-CVE-2016-10764

In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspisetupflash function. There are CQSPIMAXCHIPSELECT elements in the -fpdata array so the "" should be "=" instead...