Servicing stack update for Windows 10, version 2004: September 8, 2020

None None...

SQLMap v1.4.9 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

Description of the security update for Microsoft Visual Studio 2012 Update 5: September 8, 2020

Description of the security update for Microsoft Visual Studio 2012 Update 5: September 8, 2020 Note This security update applies to Visual Studio 2012 Update 5 except for Visual Studio Isolated and Integrated Shells, Build Tools, Remote Tools, and Express for Web. Summary A remote code execution...

SUSE SLES12 Security Update : php7 (SUSE-SU-2020:2403-1)

This update for php7 fixes the following issues : fix CVE-2020-7068 bsc1175223: Use of freed hash key in the pharparsezipfile function Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE-SU-2020:2456-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the pharparsezipfile function bsc1175223...

SUSE-SU-2020:2405-1 Security update for php72

This update for php72 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the pharparsezipfile function bsc1175223...

SUSE-SU-2020:2403-1 Security update for php7

This update for php7 fixes the following issues: - fix CVE-2020-7068 bsc1175223: Use of freed hash key in the pharparsezipfile function...

EulerOS 2.0 SP8 : xerces-j2 (EulerOS-SA-2020-1889)

According to the version of the xerces-j2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML...

Yelp: IDOR in locid parameter allowing to view others accounts Profile Locations

The application transmits in many occasions the locid parameter via URL, which means that this parameter may be being logged in plan text in the Apache server access.log, if not in others also. The fact that this happens, makes this parameter vulnerable not only to be read from this log file, but...

CVE-2020-14512

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

CVE-2020-14512

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

Design/Logic Flaw

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

CVE-2020-14512 USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

CVE-2020-14512

CVE-2020-14512 affects Secomea GateManager (versions prior to 9.2c) due to use of a weak password hash, potentially allowing an attacker to view user passwords. Affected firmware patches exist (GateManager 9.2c/9.2i); apply the latest update to mitigate. CISA ICS advisory confirms the vulnerabili...

Updated python-ipaddress package fixes security vulnerability

Hash collisions in IPv4Interface and IPv6Interface could lead to DOS CVE-2020-14422...

The vulnerability of TeamViewer’s remote control software lies in the lack of commas in the syntax of certain elements or search paths. This allows a hacker to intercept the administrator’s password hash.

The vulnerability of TeamViewer’s remote control software lies in the lack of commas in the syntax of certain elements or search paths. Exploiting this vulnerability allows a malicious actor to intercept the administrator’s password hash...

FreeBSD : Python -- multiple vulnerabilities (3fcb70a4-e22d-11ea-98b2-080027846a02)

Python reports : bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded CVE-2020-15523. bpo-41004: CVE-2020-14422: The hash methods of ipaddress.IPv4Interface and ipaddress.IPv6Interface incorrectly generated constant hash values of 32 and 128 respectively. This...

CVE-2015-8033

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

CVE-2015-8033

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

SUSE-SU-2020:2216-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2019-20907, bsc1174091: avoiding possible infinite loop in specifically crafted tarball. - CVE-2020-14422, bsc1173274: where hash collisions in IPv4Interface and IPv6Interface could lead to DOS...