Debian: Security Advisory (DLA-2183-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 3.0: Ansible PHSA-2020-3.0-0078

An update of the ansible package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0078. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135779;...

PowerShell-Suite

This is an exploit module/toolkit targeting Windows UAC User Account Control bypass. The module, named "Bypass-UAC," provides a framework for performing UAC bypasses based on auto-elevating IFileOperation COM object method calls. It implements a function that rewrites PowerShell's PEB Process...

i-link.jp.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146310 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

SQL injection vulnerability in the i*** parameter of the us***.php page of the website building system of Xi'an BaiLian Network Technology Co.

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. website building system us.php page i parameters exist SQL injection...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

i-trading.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1139784 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting i-trading.ru website and...

Denial Of Service (DoS)

The kernel is vulnerable to denial of service DoS. The attack is due to Numerous reference count leaks in the Linux kernel's block layer I/O context handling implementation. This could allow a local, unprivileged user to cause a denial of service...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists as the I/O statistics from the taskstats subsystem could be read without any restrictions. A local, unprivileged user could use this flaw to gather confidential information, such as the length of a password used in a process...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the Xenbus code for the unified block-device I/O interface back end. A privileged guest user could use this flaw to cause a denial of service on the host system running the Xen hypervisor...

Information Disclosure

kernel is vulnerable to information disclosure. A missing upper bound integer check was found in the sysiosubmit function in the Linux kernel asynchronous I/O implementation. A local, unprivileged user could use this flaw to cause an information leak...

Fedora: Security Advisory for squid (FEDORA-2020-790296a8f4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

i-dent-dental.com Cross Site Scripting vulnerability

Security Researcher TheLordsWork Helped patch 11 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting i-dent-dental.com website and its users. Following coordinated and responsible...

i-tea.com.ua Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1126835 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting i-tea.com.ua website and...

PowerShell-Suite

This repository is an offensive tool for Windows UAC User Account Control bypass. The tool, named "Bypass-UAC," provides a framework to perform UAC bypasses based on auto-elevating IFileOperation COM object method calls. It rewrites PowerShell's PEB Portable Executable Binary to give it the...

i-dvr.net Cross Site Scripting vulnerability

Security Researcher Mughiwara Helped patch 190 vulnerabilities Received 2 Coordinated Disclosure badges Received 4 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting i-dvr.net website and its users. Following coordinated and...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM i

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated...

Command Injection in quobject/aws-cli-js

Overview The issue occurs because a user input is formatted inside a command that will be executed without any check. The issue arises here. Proof of Concept Credit: Mik317 1. Create the following PoC file: js // poc.js var awsCli = require"aws-cli-js"; var Options = awsCli.Options; var Aws =...

SUSE-RU-2020:0793-1 Recommended update for systemd

This update for systemd fixes the following issues: - manager: fix job mode when signalled to shutdown etc bsc1161262 - remove fallback for user/exit.target - dbus method Manager.Exit does not start exit.target - do not install rescue.target for alt-↑ - %j/%J unit specifiers Added support for I/O...

CVE-2019-5186

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1eb9c the extracted interface element name from the xml file is...