[SECURITY] Fedora 34 Update: lapack-3.9.0-7.fc34

LAPACK Linear Algebra PACKage is a standard library for numerical linear algebra. LAPACK provides routines for solving systems of simultaneous linear equations, least-squares solutions of linear systems of equations, eigenvalue problems, and singular value problems. Associated matrix factorizatio...

connieluproperties.com Cross Site Scripting vulnerability OBB-2151952

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

GHSA-6HFQ-H8HQ-87MF HTTP Request Smuggling in hyper

Summary hyper's HTTP server code had a flaw that incorrectly understands some requests with multiple transfer-encoding headers to have a chunked payload, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that understands the request payload boundary different...

LU Master 6.0 official version has dll hijacking vulnerability

LU Master is a free system tool software in China. A dll hijacking vulnerability exists in LU Master 6.0 official version. An attacker can exploit this vulnerability to execute malicious code...

XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

GHSA-MW36-7C6C-Q4Q2 XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

lu.theconstructionjob.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-971839 Security Researcher 0xrocky Helped patch 1796 vulnerabilities Received 7 Coordinated Disclosure badges Received 5 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting lu.theconstructionjob.com...

PT-2019-18446

Name of the Vulnerable Software and Affected Versions Alcatel LINKZONE MW40-V-V1.0 MW40 LU 02.00 02 Description The web interface of the device is susceptible to an authentication bypass, allowing unauthorized access without the need for the administrator's password. Recommendations For Alcatel...

Buffer overflow

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "requestimage" as one of the service actions for ...

PT-2019-8660

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered in the UPnP services provided by the devices, which are available on port 3480 and can also be accessed via port 80 using the url "/port 3480". The...

XSS Vulnerability in the Online School System of Beijing Yi Zhi Lu Technology Co.

Ltd. is a high-tech enterprise focusing on the research and development of online education products and one-stop service of online education solutions. There is an xss vulnerability in the online school system of Beijing EZL Technology Co., Ltd. that can be exploited by attackers to inject...

legilux.public.lu XSS vulnerability

Open Bug Bounty ID: OBB-685693 Description| Value ---|--- Affected Website:| legilux.public.lu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

sport24.lu XSS vulnerability

Open Bug Bounty ID: OBB-683242 Description| Value ---|--- Affected Website:| sport24.lu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PLANEX CS-QR20 Command Execution

Reserved CVE: CVE-2017-12576 Description A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. Vulnerability Type Insecure Permissions Affected Product Code Base Firmware ver 1.30 Affected Component Web management UI...

vmc3.lu XSS vulnerability

Open Bug Bounty ID: OBB-651187 Description| Value ---|--- Affected Website:| vmc3.lu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

quiksilver.lu XSS vulnerability

Open Bug Bounty ID: OBB-625445 Description| Value ---|--- Affected Website:| quiksilver.lu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lu.tezenis.com XSS vulnerability

Vulnerable URL: https://lu.tezenis.com/catalog/restsearch.cmd?formstate=searchForm=OPENBUGBOUNTY%3C/title%3E%3Cimg/src=x%20onerror=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:47 GMT Vulnerability type:| XSS...

tn3270-screen NSE Script

Connects to a tn3270 'server' and returns the screen. Hidden fields will be listed below the screen with row, col coordinates. Script Arguments tn3270-screen.commands a semi-colon separated list of commands you want to issue before printing the screen tn3270-screen.lu specify a logical unit you...

CVE-2016-1606

Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via 1 the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, 2 the CPName property value to...

Ubuntu 14.04 LTS : Linux kernel (Wily HWE) vulnerabilities (USN-3017-3)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3017-3 advisory. USN-3017-1 fixed vulnerabilities in the Linux kernel for Ubuntu 15.10. This update provides the corresponding updates for the Linux Hardware Enablement H...