jackson-databind: arbitrary code execution in slf4j-ext class

A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using slf4j classes. An attacker could use this flaw to execute arbitrary code...

CVE-2019-9734

CVE-2019-9734 affects Aquarius CMS up to version 4.3.5, where an overwriting of configuration parameters causes POST and GET parameters (including passwords) to be written to a log file. The impact is exposure of credentials via logging under certain circumstances. The connected documents do not ...

openSUSE Security Update : libqt5-qtvirtualkeyboard (openSUSE-2019-1259)

This update for libqt5-qtvirtualkeyboard fixes the following issues : Security issue fixed : - CVE-2018-19865: Fixed an issue with verbose keypress logging boo1118593. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

OPENSUSE-SU-2019:1263-1 Security update for libqt5-qtvirtualkeyboard

This update for libqt5-qtvirtualkeyboard fixes the following issues: Security issue fixed: - CVE-2018-19865: Fixed an issue with verbose keypress logging boo1118593. This update was imported from the openSUSE:Leap:15.0:Update update project...

OPENSUSE-SU-2019:1259-1 Security update for libqt5-qtvirtualkeyboard

This update for libqt5-qtvirtualkeyboard fixes the following issues: Security issue fixed: - CVE-2018-19865: Fixed an issue with verbose keypress logging boo1118593...

Security update for libqt5-qtvirtualkeyboard (moderate)

openSUSE Security Update: Security update for libqt5-qtvirtualkeyboard Announcement ID: openSUSE-SU-2019:1263-1 Rating: moderate References: 1118593 Cross-References: CVE-2018-19865 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description:...

Sensitive Data Exposure

Overview Versions of sequelize-cli prior to 5.5.0 are vulnerable to Sensitive Data Exposure. The function filteredURL does not properly sanitize the config.password value which may cause passwords with special characters to be logged in plain text. Recommendation Upgrade to version 5.5.0 or later...

jackson-databind: arbitrary code execution in slf4j-ext class

A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using slf4j classes. An attacker could use this flaw to execute arbitrary code...

[SECURITY] Fedora 30 Update: systemd-241-7.gita2eaa1c.fc30

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

CVE-2019-8513

creationtimestamp| type| source ---|---|--- 2019-04-13 18:51:06+00:00| published-proof-of-concept| https://t.me/antichat/4432 2019-04-13 20:10:59+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5400 2019-06-29 10:52:23+00:00| seen|...

CVE-2019-9976

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users...

CVE-2019-9976

The CVE-2019-9976 entry documents a vulnerability in the Boa web server used on DASAN H660RM devices running firmware 1.03-0022 where POST data is logged to /tmp/boa-temp. This storage allows logged-in users to read the credentials of administration web interface users, causing a confidentiality ...

Popular Video Editing Software Website Hacked to Spread Banking Trojan

If you have downloaded the VSDC multimedia editing software between late February to late March this year, there are high chances that your computer has been infected with a banking trojan and an information stealer. The official website of the VSDC software — one of the most popular, free video...

[SECURITY] Fedora 30 Update: systemd-241-5.git3d835d0.fc30

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

AIDA64 Extreme 5.99.4900 - Logging SEH Buffer Overflow

AIDA64 Extreme 5.99.4900 - Logging SEH Buffer Overflow !/usr/bin/python Exploit Title: AIDA64 Extreme 5.99.4900 - Logging SEH Buffer Overflow Date: 2019-04-02 Vendor Homepage: https://www.aida64.com Software Link: http://download.aida64.com/aida64extreme599.exe Mirror Link :...

AIDA64 Extreme 5.99.4900 - 'Logging' SEH Buffer Overflow

!/usr/bin/python Exploit Title: AIDA64 Extreme 5.99.4900 - Logging SEH Buffer Overflow Date: 2019-04-02 Vendor Homepage: https://www.aida64.com Software Link: http://download.aida64.com/aida64extreme599.exe Mirror Link : https://www.nikktech.com/main/downloads/finalwire/aida64extreme599.exe Explo...

Security update for ansible (moderate)

openSUSE Security Update: Security update for ansible Announcement ID: openSUSE-SU-2019:1125-1 Rating: moderate References: 1099808 1102126 1109957 1112959 1116587 1118896 1126503 Cross-References: CVE-2018-10875 CVE-2018-16837 CVE-2018-16859 CVE-2018-16876 CVE-2019-3828 Affected Products: SUSE...

AIDA64 Extreme 5.99.4900 - Logging SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: AIDA64 Extreme 5.99.4900 - Logging SEH Buffer Overflow Vendor Homepage: https://www.aida64.com Software Link: http://download.aida64.com/aida64extreme599.exe Mirror Link :...

[SECURITY] Fedora 30 Update: systemd-241-4.gitcbf14c9.fc30

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

Design/Logic Flaw

A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated...