209 matches found
GSD-2022-1003404 ALSA: jack: Access input_dev under mutex
ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...
GSD-2022-1003155 ALSA: jack: Access input_dev under mutex
ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...
GSD-2022-1002841 ALSA: jack: Access input_dev under mutex
ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...
Debian DSA-5165-1 : vlc - security update
The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5165 advisory. Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file is...
WSO Arbitrary File Upload / Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WSO2 Arbitrary File Upload to RCE', 'Description' = %q This module abuses a vulnerability in certain WSO2 products that allow unrestricted file...
DEBIAN-CVE-2021-41498
Buffer overflow in ajaxsoundstudio.com Pyo < and 1.03 in the Serverjackinit function. which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong server name...
UBUNTU-CVE-2021-41498
Buffer overflow in ajaxsoundstudio.com Pyo < and 1.03 in the Serverjackinit function. which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong server name...
PYSEC-2021-890
Buffer overflow in ajaxsoundstudio.com Pyo and 1.03 in the Serverjackinit function. which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong server name...
Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly (important)
openSUSE Security Update: Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly Announcement ID: openSUSE-SU-2021:1819-1 Rating: important References: 1181255 SLE-13843 Cross-References: CVE-2021-3185 CVSS scores: CVE-2021-318...
SolarWinds Serv-U FTP Server 15.2.1 Cross Site Scripting
Title: Stored XSS Product: SolarWinds Serv-U FTP Server Vendor Homepage: https://www.solarwinds.com/ Vulnerable Version: 15.2.1 and lower Fixed Version: 15.2.2 CVE Number: CVE-2020-28001 Author: Jack Misiura from The Missing Link Website: https://www.themissinglink.com.au Timeline: 2020-10-30...
SolarWinds Serv-U FTP Server 15.2.1 Path Traversal
Title: Path traversal Product: SolarWinds Serv-U FTP Server Vendor Homepage: https://www.solarwinds.com/ Vulnerable Version: 15.2.1 and lower Fixed Version: 15.2.2 CVE Number: CVE-2020-27994 Author: Jack Misiura from The Missing Link Website: https://www.themissinglink.com.au Timeline: 2020-10-28...
WordPress DirectoriesPro 1.3.45 Cross Site Scripting
Title: Reflected XSS Product: WordPress DirectoriesPro Plugin by SabaiApps Vendor Homepage: https://directoriespro.com/ Vulnerable Version: 1.3.45 Fixed Version: 1.3.46 CVE Number: CVE-2020-29303 Author: Jack Misiura from The Missing Link Website: https://www.themissinglink.com.au Timeline:...
OpenAsset Digital Asset Management Cross Site Request Forgery
Title: Cross-site request forgery CSRF Product: OpenAsset Digital Asset Management by OpenAsset Vendor Homepage: https://www.openasset.com/ Vulnerable Version: 12.0.19 Cloud 11.2.1 On-premise Fixed Version: 12.0.26 Cloud 11.4.10 On-premise CVE Number: CVE-2020-28858 Author: Jack Misiura from The...
WordPress NAB Transact WooCommerce 2.1.0 Payment Bypass Vulnerability
Exploit for php platform in category web applications Title: Payment bypass Product: WordPress NAB Transact WooCommerce Plugin Vendor Homepage: https://woocommerce.com/products/nab-transact-direct-post/ Vulnerable Version: 2.1.0 Fixed Version: 2.1.2 CVE Number: CVE-2020-11497 Author: Jack Misiura...
Jack Daniels, Ritz London Face Cyberattacks
A pair of cyberattacks on high-profile targets – the owner of the Jack Daniels distillery and the iconic Ritz London hotel – have resulted in the exposure of sensitive information. The maker behind Jack Daniels and other alcoholic beverages, Brown-Forman Corp., has suffered a recent cyberattack b...
WordPress WooCommerce Advanced Order Export 3.1.3 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Product: WordPress WooCommerce - Advanced Order Export plugin. Vendor Homepage: https://algolplus.com/plugins/downloads/advanced-order-export-for-woocommerce-pro/ Vulnerable Version: 3.1.3 Fixed Version: 3.1.4 CVE Number: CVE-2020-11727 Author...
CVE-2016-11038
The CVE-2016-11038 issue affects Samsung mobile devices (software up to 2016-04-05) involving the Jack audio service. The vulnerability arises from missing access control for shared memory in the Jack service, enabling arbitrary code execution or privilege escalation. Affected component: Jack aud...
Private details of 10.7 million MGM Hotel guests sold on Dark Web
By Deeba Ahmed The database on the dark web also includes details of Justin Bieber and Twitter's Jack Dorsey. This is a post from HackRead.com Read the original post: Private details of 10.7 million MGM Hotel guests sold on Dark Web...
Twitter temporarily disables 'Tweeting via SMS' after CEO gets hacked
Twitter today finally decided to temporarily disable a feature, called 'Tweeting via SMS,' after it was abused by a hacking group to compromise Twitter CEO Jack Dorsey last week and sent a series of racist and offensive tweets to Dorsey's followers. Dorsey's Twitter account was compromised last...
Twitter CEO Jack Dorsey’s account hacked with racial slurs
By Waqas A group of hackers going by the handle of "Chuckle Squad" hacked the official Twitter account of Twitter CEO Jack Dorsey on Friday afternoon. This is a post from HackRead.com Read the original post: Twitter CEO Jack Dorsey’s account hacked with racial slurs...