CVE-2019-19519

OpenBSD 6.6 vulnerability CVE-2019-19519: a logic error in su.c enables a local user to use su -L to login with another user’s login class, enabling local privilege escalation. Affected software is OpenBSD 6.6; the flaw resides in the main function of su/su.c. Consequences include bypassing inten...

CVE-2019-19519

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

l-invest.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1029591 Security Researcher geeknik Helped patch 8748 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting l-invest.ru website and it...

apcd.org.br Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6836 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting apcd.org.br website and its users. Following coordinated...

CVE-2019-13555

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

Race condition

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

CVE-2019-13555

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

CVE-2019-13555

CVE-2019-13555 affects Mitsubishi Electric MELSEC-Q Series (Q03/04/06/13/26UDVCPU, Q04/06/13/26UDPVCPU, Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU) and MELSEC-L Series (L02/06/26CPU, L26CPU-BT, L02/06/26CPU-P, L26CPU-PBT, L02/06/26CPU-CM, L26CPU-BT-CM). A remote attacker can cause the FTP servic...

PT-2019-13417

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU versions with serial number 21081 and prior Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU versions with serial number 21081 and prior Mitsubishi Electric MELSEC-Q Series...

CVE-2019-13555: Uncontrolled Resource Consumption

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

Mitsubishi Electric MELSEC-Q Series and Mitsubishi MELSEC-L Series Resource Management Error Vulnerability

Mitsubishi Electric MELSEC-Q Series is a MELSEC-Q series programmable logic controller from Mitsubishi Electric, Japan.Mitsubishi MELSEC-L Series is a MELSEC-L series programmable logic controller from Mitsubishi, Japan. Mitsubishi MELSEC-L Series is a MELSEC-L series programmable logic controlle...

Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: MELSEC-Q Series and MELSEC-L Series CPU Modules Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may...

Buffer overflow

Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code remote. The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to...

CVE-2017-14948: Buffer Copy without Checking Size of Input

Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code remote. The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to...

PT-2019-8014

Name of the Vulnerable Software and Affected Versions D-Link DIR-880L version 1.08B04 D-Link DIR-895 L/R version 1.13b03 Description The issue allows an attacker to execute arbitrary code remotely. It involves a buffer overflow in the htdocs/fileaccess.cgi component. A crafted HTTP request to thi...

CVE-2015-9480: Improper Limitation of a Pathname to a Restricted Directory

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter...

PT-2019-7439

Name of the Vulnerable Software and Affected Versions RobotCPA plugin version 5 for WordPress Description The issue allows directory traversal via the l parameter in the f.php file. Recommendations For RobotCPA plugin version 5, consider restricting access to the f.php file until a patch is...

SQL Injection Vulnerability in Zendo Project Management System m****l.php File

Zendo project management system developed by Qingdao Easoft Tianchuang Network Technology Co., Ltd, domestic open source project management software. It integrates product management, project management, quality management, document management, organizational management and transaction management...

escala-l-1.listado-empresas.es Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-979659 Security Researcher Gh05tPT Helped patch 6882 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

alcudia-l-1.listado-empresas.es Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6846 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting alcudia-l-1.listado-empresas.es website and its users...