13607 matches found
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
Hackers Dump 2.2M Gaming, Cryptocurrency Passwords Online
The passwords and other personal data of more than 2.2 million users of two websites were revealed online as the result of data breaches that happened earlier this year, a notable security researcher warned. Personal information belonging to the users of cryptocurrency wallet service GateHub and...
Official Monero Site Hacked to Distribute Cryptocurrency Stealing Malware
What an irony — someone hacked the official website of the Monero cryptocurrency project and quietly replaced legitimate Linux and Windows binaries available for download with malicious versions designed to steal funds from users' wallets. The latest supply-chain cyberattack was revealed on Monda...
CVE-2011-4967
tog-Pegasus has a package hash collision DoS vulnerability...
Design/Logic Flaw
tog-Pegasus has a package hash collision DoS vulnerability...
CVE-2011-4967
tog-Pegasus has a package hash collision DoS vulnerability...
CVE-2011-4967
CVE-2011-4967, titled tog-Pegasus hash collision DoS vulnerability, affects the tog-Pegasus package (hash collision in its XML table) and is described across multiple sources as a DoS vector with a network attack surface. NVD lists CVSS2/3.1 base scores of 5.0 (Medium) and 7.5 (High) respectively...
The vulnerability of the ssedb_search_user_by_upn_res() function in the access control service for remote directories and the authentication mechanism sssd allows a intruder to gain unauthorized access to protected information.
The vulnerability of the ssedbsearchuserbyupnres function of the access control service for remote directories and the sssd authentication mechanism is related to insufficient validation of input data when querying the local cache that stores password hashes. Exploiting this vulnerability could...
Evil-Winrm v1.9 - The Ultimate WinRM Shell For Hacking/Pentesting
This shell is the ultimate WinRM shell for hacking/pentesting. WinRM Windows Remote Management is the Microsoft implementation of WS-Management Protocol. A standard SOAP based protocol that allows hardware and operating systems from different vendors to interoperate. Microsoft included it in thei...
Description of the security update for Office Online Server: November 12, 2019
None None...
Description of the security update for SharePoint Server 2010: November 12, 2019
Description of the security update for SharePoint Server 2010: November 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Comm...
Description of the security update for SharePoint Server 2019 Language Pack: November 12, 2019
None None...
Description of the security update for Excel 2010: November 12, 2019
Description of the security update for Excel 2010: November 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for Office 2010: November 12, 2019
Description of the security update for Office 2010: November 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for SharePoint Enterprise Server 2013: November 12, 2019
None None...
Prima FlexAir Access Control 2.3.35 Database Backup Predictable Name
!/usr/bin/env python -- coding: utf8 -- Prima FlexAir Access Control 2.3.35 Database Backup Predictable Name Exploit Authentication Bypass Login with MD5 hash CVE: CVE-2019-7666, CVE-2019-7667 Advisory: https://applied-risk.com/resources/ar-2019-007 Paper:...
FlexAir Access Control 2.3.35 - Authentication Bypass Exploit
Exploit for hardware platform in category web applications Exploit Title: FlexAir Access Control 2.3.35 - Authentication Bypass Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/...
Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: October 8, 2019
Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: October 8, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include the following: Improves the Secure Boot revocation list DBX update...
TYPO3 Encryption Problem Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.3.4 and 4.4.x prior to 4.4.1. An attacker can exploit the vulnerability to brute-force hash values...