The vulnerability of the Cisco IOx software platform for the Cisco IOS XE operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the Cisco IOx software platform for the Cisco IOS XE operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code...

The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers arises from improperly implemented data filtering during input processing. This allows attackers to alter the contents of project configuration files.

The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers is related to improperly implemented data filtering. Exploiting this vulnerability allows a malicious actor to remotely modify the contents of project configuration files...

The vulnerability of Huawei’s microprogrammed router software, related to authentication deficiencies, allows attackers to execute arbitrary commands.

The vulnerability of Huawei’s microprogrammed router software is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Android operating system’s touchscreen interface on Samsung mobile devices, which allows a hacker to turn Bluetooth on or off.

The vulnerability of the Android operating system’s touchscreen interface on Samsung mobile devices is related to authentication deficiencies. Exploiting this vulnerability could allow a hacker to turn on or off Bluetooth...

Microsoft June Patch Tuesday Fixes 129 Flaws in Largest-Ever Update

Microsoft has released patches for 129 vulnerabilities as part of its June Patch Tuesday updates – the highest number of CVEs ever released by Microsoft in a single month. Within the blockbuster security update, 11 critical remote code-execution flaws were patched in Windows, SharePoint server,...

h1-ctf: [h1-2006 CTF] Payments for May have been processed!

Hi : First off thanks for a great CTF! It had its ups and downs mainly due to my mistakes but here is the final flag: ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ My write up can be found at https://devcraft.io/bountypay-h1-2006-ctf.html unpublished detailing the process, tools, and mistakes I ma...

LibreOffice Security Advisory

LibreOffice reports: Two flaws were found in LibreOffice: CVE-2020-12802: remote graphics contained in docx format retrieved in 'stealth mode' CVE-2020-12803: XForms submissions could overwrite local files...

The vulnerability of the Connector/J driver for MySQL Connectors of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Connector/J driver for MySQL Connectors of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Vulnerability of the Server: Optimizer component of the MySQL Client database management system, which allows attackers to cause service failures.

The vulnerability of the Server: Optimizer component of the MySQL Client database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL Protocol network protocol...

The vulnerability of the nVision component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to trigger a service failure.

The vulnerability of the nVision component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the HTTP protocol...

The vulnerability of the Diagnostic Framework component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Diagnostic Framework component of the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Server:Optimizer component of the MySQL Server database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL Protocol...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component, which is part of the database management system, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

Vulnerability of the Server component: The Information Schema of the MySQL Server database management system, which allows a hacker to cause a service failure.

Vulnerability of the MySQL Server component: The information schema of the MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL Protocol...

Vulnerability of the Server:Charsets component of the MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server:Charsets component of the MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL Protocol...

Vulnerability of the Server:Parser component of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Oracle MySQL Server component of the database management system’s parser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using...

The vulnerability of the Process Scheduler component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Process Scheduler component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Self-Service component of the Oracle PeopleSoft Enterprise CS Campus Community application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Self-Service component of the Oracle PeopleSoft Enterprise CS Campus Community application is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the C API component of the MySQL Database Management System client, which allows a hacker to trigger a service failure.

The vulnerability of the C API component of the MySQL Database Management System client is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL Protocol network protocol...