38714 matches found
Internet Download Manager Stack Buffer Overflow Vulnerability
Internet Download Manager is a download utility that offers a variety of features such as breakpoint transfer. A stack buffer overflow vulnerability exists in Internet Download Manager. An attacker can corrupt the file system by elevating the privileges of a local process...
Internet Download Manager 6.37.11.1 - Stack Buffer Overflow (PoC)
Title: Internet Download Manager 6.37.11.1 - Stack Buffer Overflow PoC Author: Vulnerability Laboratory Date: 2020-04-28 Vendor: https://www.internetdownloadmanager.com Software: https://www.internetdownloadmanager.com/download.html CVE: N/A Document Title: =============== Internet Download Manag...
kernel: some ipv6 protocols not encrypted over ipsec tunnel
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...
Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR
A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe this IP ID field to extract the kernel address bits used to derive its value, which may result in leaking the hash key and...
kernel: The flow_dissector feature allows device tracking
A device tracking vulnerability was found in the flowdissector feature in the Linux kernel. This flaw occurs because the auto flowlabel of the UDP IPv6 packet relies on a 32-bit hashmd value as a secret, and jhash instead of siphash is used. The hashmd value remains the same starting from boot ti...
kernel: some ipv6 protocols not encrypted over ipsec tunnel
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...
Researchers Uncover Novel Way to De-anonymize Device IDs to Users' Biometrics
Researchers have uncovered a potential means to profile and track online users using a novel approach that combines device identifiers with their biometric information. The details come from a newly published research titled "Nowhere to Hide: Cross-modal Identity Leakage between Biometrics and...
Internet Download Manager 6.37.11.1 Buffer Overflow
Document Title: =============== Internet Download Manager v6.37.11.1 - Stack Buffer Overflow Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2236 Release Date: ============= 2020-04-28 Vulnerability Laboratory ID VL-ID:...
internetorchestra.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1151353 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting internetorchestra.fr...
IDM v6.37.11.1 - Stack Buffer Overflow Vulnerabilities
Document Title: =============== IDM v6.37.11.1 - Stack Buffer Overflow Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2236 Release Date: ============= 2020-04-27 Vulnerability Laboratory ID VL-ID: ==================================== 22...
HPE UIoT Unauthorized Access Vulnerability (CNVD-2020-33330)
HPE UIoT is a suite of universal IoT platforms from Hewlett Packard Enterprise HPE in the United States. The platform features data analytics, monetary safety and synchronization management. A security vulnerability exists in HPE UIoT 1.4.2 and prior versions. An attacker could exploit the...
Apple CUPS Buffer Overflow Vulnerability
Apple CUPS is the United States Apple Apple company's set of open source for OS X and Unix-like system printing system. The system is based on the Internet Printing Protocol IPP, providing most PostScript and raster printer services. A buffer overflow vulnerability exists in Apple CUPS. The...
CVE-2020-7133
A unauthorized remote access vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...
CVE-2020-7134
A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...
CVE-2020-7133
A unauthorized remote access vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...
CVE-2020-7134
A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...
Connected Home Hubs Open Houses to Full Remote Takeover
Three different connected home hubs – Fibaro Home Center Lite, Homematic Central Control Unit CCU2 and Elko’s eLAN-RF-003 – are vulnerable in their older versions to serious bugs that would allow information disclosure, man-in-the-middle MiTM attacks and unauthenticated remote code execution RCE,...
October 14, 2014 update for SharePoint Server 2013 (KB2889930)
October 14, 2014 update for SharePoint Server 2013 KB2889930 This article describes update KB2889930 for Microsoft SharePoint Server 2013 that was released on October 14, 2014. Improvements and Fixes Fixes the following issue: Assume that you insert a shape that contains a hyperlink into a drawin...