Apple Safari HTMLFormElement Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within HTML forms. The iss...

PT-2018-7247

Name of the Vulnerable Software and Affected Versions: GIGABYTE BRIX UEFI firmware affected versions not specified Description: The issue concerns the lack of cryptographic validation of images prior to updating the system firmware. Furthermore, firmware updates are served over HTTP, which allows...

Directory Traversal

buttle is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of sanitization of filename, allowing directory traversal attacks...

Brave Software: Lack of quarantine meta-attribute for downloaded files leads to GateKeeper bypass

Summary: Executable files downloaded through Brave don't have quarantine attribute. That means it's possible to launch any executable bypassing codesigning + quarantine. However, later I found that Brave has already tracked similar report but only in the context of .pkg files. Additionally, Brave...

CVE-2018-12904

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL...

PT-2018-6314

Name of the Vulnerable Software and Affected Versions: Beckhoff TwinCAT affected versions not specified Description: The issue concerns the ADS protocol used by Beckhoff TwinCAT for communication in industrial automation environments. ADS lacks encryption due to performance considerations, allowi...

PT-2018-11464

Name of the Vulnerable Software and Affected Versions Rclone version 1.42 Description The issue allows attackers to trigger the transmission of any URL's content to Google due to the lack of validation of a URL field received from the Google Cloud Storage API server. Recommendations For Rclone...

CVE-2018-12904

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL...

OpenRedirect in Malicious Generated PDF Document on FortiAnalyzer and FortiManager

An open redirect vulnerability exists in FortiAnalyzer and FortiManager when a user of the GUI is converting an HTML table to a PDF document via the FortiView feature, due to lack of user input sanitization...

What’s causing the cybersecurity skills gap?

The proliferation of next-gen technology into mainstream society has been a boon for consumers, entrepreneurs, and business owners alike. Between the rise of mobile computing, the Internet of Things IoT, and modern social media, our society is more connected than ever before. But all of this...

PT-2018-11081

Name of the Vulnerable Software and Affected Versions Momentum Axel 720P version 5.1.8 Description An issue allows authenticated custom firmware upgrade via DNS hijacking. An authenticated root user with CLI access can remotely upgrade firmware to a custom image due to a lack of SSL validation...

CVE-2017-5388: Allocation of Resources Without Limits or Throttling

A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack. This vulnerability affects Firefox 51...

CVE-2018-7689

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions...

CVE-2018-3713

angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path...

Path traversal

glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a malicious user to read content of any file with known path...

PT-2018-8760

Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phone software affected versions not specified Description A vulnerability in the Session Initiation Protocol SIP ingress packet processing could allow an unauthenticated, remote attacker to cause a denial of service DoS...

Trend Micro OfficeScan TMWFP driver Pool Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro OfficeScan. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Trend Micro OfficeScan TMWFP driver Pool Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro OfficeScan. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2018-18214

Name of the Vulnerable Software and Affected Versions openSUSE Open Build Service versions prior to 2.9.3 Description The issue is related to a lack of permission checks in the InitializeDevelPackage function, allowing authenticated users to modify packages without having the necessary write...

CVE-2018-3716: Improper Neutralization of Input During Web Page Generation

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names...