Information Disclosure

spring-data-jpa is vulnerable to information disclosure. Derived queries using any of the predicates startingWith, endingWith or containing could return more results than anticipated when a maliciously crafted query parameter value is supplied. LIKE expressions in manually defined queries could...

CVE-2019-3797

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...

Additional information exposure with Spring Data JPA derived queries

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...

IBM Sterling Connect:Direct Elevation of Privilege Vulnerability

IBM Sterling Connect:Direct is a file-based peer-to-peer file transfer solution from IBM in the United States. An elevation of privilege vulnerability exists in IBM Sterling Connect:Direct for UNIX versions 6.0.0, 4.3.0, and 4.2.0 for UNIX-based platforms, which can be exploited by an attacker to...

Reverse Shell Cheat Sheet

If you’re lucky enough to find a command execution vulnerability during a penetration test, pretty soon afterwards you’ll probably want an interactive shell. If it’s not possible to add a new account / SSH key / .rhosts file and just log in, your next step is likely to be either trowing back a...

[SECURITY] [DLA 1699-1] ldb security update

Package : ldb Version : 2:1.1.20-0+deb8u2 CVE ID : CVE-2019-3824 Garming Sam reported an out-of-bounds read in the ldbwildcardcompare function of ldb, a LDAP-like embedded database, resulting in denial of service. For Debian 8 "Jessie", this problem has been fixed in version 2:1.1.20-0+deb8u2. We...

Debian DSA-4397-1 : ldb - security update

Garming Sam reported an out-of-bounds read in the ldbwildcardcompare function of ldb, a LDAP-like embedded database, resulting in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4397. The...

[SECURITY] [DSA 4397-1] ldb security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4397-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2019 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4397-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ArangoDB Community Edition 3.4.2-1 - Cross-Site Scripting

Exploit Title: ArangoDB Community Edition 3.4.2-1 | Cross-Site Scripting Date: 17.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://www.arangodb.com Software Link: https://www.arangodb.com/download-major/ Version: 3.4.2-1 Introduction ArangoDB is a native multi-model, open-source databa...

Mail.ru: CSRF на лайк к отзыву (Pandao)

CSRF vulnerability in pandao.ru allowed to force user to "like" the user's comment. On the time of reportting, clientside vulnerabilities in pandao.ru are not covered by bug bounty program...

CVE-2018-19320: Undefined Security Weakness

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...

RCE in PHP or how to bypass disable_functions in PHP installations

Today we will explore an exciting method to remotely execute code even if an administrator set disablefunctions in the PHP configuration file. It works at most popular UNIX-like systems. CVE-2018–19518 was assigned to the vulnerability was found by a man with the @crlf nickname. Let’s see details...

Shining a Light on a New Technique for Stealth Persistence

Red teamers like myself and my team are driven by a desire to out-innovate the bad guys – to help the good guys. We study their methods, strive to think like they do, work to better understand attacker techniques and test our mettle against the spectrum of technologies in use today to find new wa...

Buffer overflow

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

CVE-2018-1000804

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

CVE-2018-1000804

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

CVE-2018-1000804

The CVE-2018-1000804 entry concerns contiki-ng version 4 with a Buffer Overflow in the AQL (Antelope Query Language) database engine that can enable Remote Code Execution on a Contiki-NG device. Attack requires the ability to run malicious AQL code (e.g., via SQL-like injection); no explicit expl...

CVE-2018-1000804: Improper Restriction of Operations within the Bounds of a Memory Buffer

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

PT-2018-9529

Name of the Vulnerable Software and Affected Versions contiki-ng version 4 Description The issue is related to a Buffer Overflow in the AQL database engine, which can lead to Remote Code Execution on devices using the Contiki-NG operating system. This can be exploited by running malicious AQL cod...