CVE-2020-7486

CVE-2020-7486 affects Tricon system TCMs: versions 10.0.0 through 10.4.x in Tricon v10.0–v10.4.x are vulnerable to an uncontrolled resource consumption that can cause TCMs to reset under high network load, yielding a denial-of-service condition on the safety controller. Remediation is available i...

EulerOS 2.0 SP3 : nginx (EulerOS-SA-2020-1413)

According to the version of the nginx package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read...

Tencent QQ Music suffers from dll hijacking vulnerability

Tencent QQ Music is an online music service product launched by Tencent. Tencent QQ Music suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

Zen Load Balancer 'index.cgi' Directory Traversal Vulnerability

Zen Load Balancer is a complete load balancing solution that provides high availability for TCP, UDP, advanced HTTP and HTTPS services, and data line communications uplinks. A directory traversal vulnerability exists in Zen Load Balancer 'index.cgi'. An attacker can exploit the vulnerability to...

MS15-086: Security update for Update Rollup 10 for System Center 2012 Operations Manager Service Pack 1: August 11, 2015

MS15-086: Security update for Update Rollup 10 for System Center 2012 Operations Manager Service Pack 1: August 11, 2015 Introduction This article describes the issues that are fixed in Update Rollup 10 for Microsoft System Center 2012 Operations Manager Service Pack 1 SP1. Additionally, this...

PT-2020-12807 · Sixel +2 · Libsixel +2

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.6 Description: The issue is related to an uninitialized pointer in the load png function in loader.c in libsixel.a of libsixel, leading to an invalid call to free, which can cause a denial of service. Recommendations: For...

[SECURITY] Fedora 30 Update: haproxy-1.8.25-1.fc30

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

Zen Load Balancer 3.10.1 - (index.cgi) Directory Traversal Exploit

Exploit for cgi platform in category web applications Exploit Title: Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal Exploit Author: Basim Alabdullah Software Link: https://sourceforge.net/projects/zenloadbalancer/files/Distro/zenloadbalancer-distro3.10.1.iso/download Version: 3.10.1...

Denial Of Service (DoS)

httpd is vulnerable to denial of service DoS. The vulnerability exists as it was discovered that modproxyajp incorrectly returned an "Internal Server Error" response when processing certain malformed HTTP requests, which caused the back-end server to be marked as failed in configurations where...

Privilege Escalation

The kernel contains privilege escalation. A flaw in devload could allow a local user who has the CAPNETADMIN capability to load arbitrary modules from "/lib/modules/", instead of only netdev modules...

Denial Of Service (DoS)

mysql is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the way MySQL handled LOAD DATA INFILE requests allowed MySQL to send OK packets even when there were errors...

Denial Of Service (DoS)

httpd is vulnerable to denial of service. It was discovered that modproxyajp incorrectly returned an "Internal Server Error" response when processing certain malformed requests, which caused the back-end server to be marked as failed in configurations where modproxy is used in load balancer mode....

Zen Load Balancer 3.10.1 Directory Traversal

Exploit Title: Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal Date: 2020-04-10 Exploit Author: Basim Alabdullah Software Link: https://sourceforge.net/projects/zenloadbalancer/files/Distro/zenloadbalancer-distro3.10.1.iso/download Version: 3.10.1 Tested on: Debian8u2 Technical Details...

Zen Load Balancer Directory Traversal

This module exploits a authenticated directory traversal vulnerability in Zen Load Balancer v3.10.1. The flaw exists in 'index.cgi' not properly handling 'filelog=' parameter which allows a malicious actor to load arbitrary file path. Module Options msf use...

Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal

Exploit Title: Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal Date: 2020-04-10 Exploit Author: Basim Alabdullah Software Link: https://sourceforge.net/projects/zenloadbalancer/files/Distro/zenloadbalancer-distro3.10.1.iso/download Version: 3.10.1 Tested on: Debian8u2 Technical Details...

[SECURITY] Fedora 32 Update: haproxy-2.1.4-1.fc32

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2

NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2 This article describes a problem in which Network Load Balancing NLB cluster communication gets interrupted randomly in Windows Server 2012 R2. An update is available to fix thi...

Private EUDCs are not displayed in Character Map after you apply update 2982791 in Windows 7 or Windows Server 2008 R2

Private EUDCs are not displayed in Character Map after you apply update 2982791 in Windows 7 or Windows Server 2008 R2 This article describes an end-user-defined characters EUDCs load issue that occurs after you apply update 2982791 in Windows 7 Service Pack 1 SP1 or Windows Server 2008 R2 SP1. W...

July 2016 update rollup for Windows 8.1 and Windows Server 2012 R2

July 2016 update rollup for Windows 8.1 and Windows Server 2012 R2 The July 2016 update rollup includes some new improvements and fixes, including the improvements from June 2016 update rollup KB3161606 and May 2016 update rollup KB3156418 for the Windows 8.1 and 2012 R2 platform. We recommend th...

Licensing servers become deadlocked under high load in Windows Server 2012 R2

Licensing servers become deadlocked under high load in Windows Server 2012 R2 This article describes an issue that typically occurs in a Remote Desktop License server that is running Windows Server 2012 R2 when there are multiple license servers in the deployment and during high load. Before you...