CVE-2018-20909

CVE-2018-20909 affects cPanel prior to 70.0.23, where arbitrary file-chmod operations can occur during legacy incremental backups (SEC-338). Multiple sources (NVD, Red Hat advisory, CNVD) confirm the issue and link it to cPanel’s backup handling. The vulnerability arises in the backup process, en...

Mitsubishi R16MTCPU PLC Detection

Binary data 751833.prm...

Rockwell Automation 1794 - 2 Channel 24V DC Incremental Encoder 1794-ID2/A Specialty I/O Device

Binary data 753747.prm...

Mitsubishi R64MTCPU PLC Detection

Binary data 751843.prm...

Mitsubishi R32MTCPU PLC Detection

Binary data 751839.prm...

Fixed being bypassable of CVE-2019-6257 SSRF.

Changes form previous version All previous changes is here. js:core Fixed 2863 cssAutoLoad Array option is not working js:core Fixed 2862 stop autoSync when browser tab turn to background cmd:search Fixed 2867 support incremental search other than filename VD:abstract Fixed 2873 correct MIME-Type...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 7 (VA MN: 7.0.2-617, VA Agent: 7.0.2-329)

The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-36493, PVA-37325 Backups created with CLI were not listed in the web-based control panel. Vulnerability id: PVA-37287 Fixed behavior when alerts could be triggered before set limit was exceeded. Vulnerability...

Tcpreplay Buffer Overflow Vulnerability (CNVD-2018-21785)

Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX based operating systems. A buffer overflow vulnerability exists in the 'csumreplace4' function of the incrementalchecksum.h file in Tcpreplay version 4.3.0 beta1. An attacker could exploit this...

CVE-2018-18407

A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csumreplace4 in incrementalchecksum.h, causing a denial of service...

UBUNTU-CVE-2018-18407

A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csumreplace4 in incrementalchecksum.h, causing a denial of service...

Heap overflow

A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csumreplace4 in incrementalchecksum.h, causing a denial of service...

DEBIAN-CVE-2018-18407

A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csumreplace4 in incrementalchecksum.h, causing a denial of service...

CVE-2018-18407

A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csumreplace4 in incrementalchecksum.h, causing a denial of service...

Fedora 27 : 32:bind (2018-90f8fbd58e)

Update to 9.11.4-P1 - Fixes CVE-2018-5738 - Adds root key sentinel mechanism support - incremental zone transfer limit to prevent journal corruption - rndc reload memory leak Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

DEBIAN-CVE-2017-5410

Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...

HackerOne: Information disclosure

Summary: Chaining few simple informative issues on HackerOne platform and applying new method of timing attack, exploiting interesting feature in HTML5 https://developer.mozilla.org/en-US/docs/Web/API/ResourceTimingAPI/UsingtheResourceTimingAPI more precise Copy with CORSwe can perform low cost,...

Software Defined Radio Attack Tool: RFCrack

RFCrack is my personal RF test bench, it was developed for testing RF communications between any physical device that communicates over sub Ghz frequencies. IoT devices, Cars, Alarm Systems etc… Testing was done with the Yardstick One on OSX, but RFCrack should work fine in linux. Current support...

WebKit - WebCore::InputType::element Use-After-Free Exploit

Exploit for multiple platform in category dos / poc var runcount = 0; function go runcount++; ifruncount 2 return; i.type = "foo"; i.select; i.type = "search"; document.onsearch = document.body.onload; document.execCommand"insertHTML", false, ""; !--...

How to place Veeam Agent for Microsoft Windows backup chain on Veeam backup repository, so backup job continues chain

Purpose This article documents placing a backup chain created by Veeam Agent for Microsoft Windows in a Veeam Backup & Replication repository so that when the Veeam Agent for Microsoft Windows backup job targets that repository it will continue the existing backup chain. Use Case By default, when...

openSUSE Security Update : xtrabackup (openSUSE-2017-382)

This update to xtrabackup 2.3.7 fixes one security issue and bugs. The following security issue was fixed : - innobackupex and xtrabackup scripts were showing the password in the ps output when it was passed as a command line argument boo1026729 The following functionality was added : - new...