Discuz! ML arbitrary code execution vulnerability alerts-a vulnerability alert-the black bar safety net

2019 Year 7 month 11 days, the network appeared on a Discuz it! ML remote code execution vulnerability PoC, through Sangfor security researcher to verify the analysis found, the attacker can use the vulnerability in the request flow of the cookie field in the language parameter to insert arbitrar...

Discuz!ML 3.x Arbitrary Code Execution Vulnerability

Discuz!ML is a multilingual open source community system based on the Discuz!X engine. An arbitrary code execution vulnerability exists in Discuz!ML 3.x, which can be exploited by attackers to execute arbitrary code...

Discuz!ML v3.x - Code Injection Vulnerability

Document Title: =============== Discuz!ML v3.x - Code Injection Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2185 Download: https://www.vulnerability-lab.com/resources/documents/2185.rar http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13956...

Discuz!ML v3.x - Code Injection Vulnerability

Document Title: =============== Discuz!ML v3.x - Code Injection Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2185 Download: https://www.vulnerability-lab.com/resources/documents/2185.rar http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13956...

Aerotech Ensemble ML Servo Drives Detection

Binary data 763918.prm...

Aerotech Soloist ML Servo Drives Detection

Binary data 763920.prm...

sourced-ml (0.4.5) potentially affected by CVE-2018-1334 via pyspark (2.2.0.post0)

pyspark PYPI version 2.2.0.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - sourced-ml 0.4.5 Source cves: CVE-2018-1334 Source advisory: GHSA-6MQQ-8R44-VMJC...

sourced-ml (0.4.5) potentially affected by CVE-2018-1334 via pyspark (2.2.0.post0)

pyspark PYPI version 2.2.0.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - sourced-ml 0.4.5 Source cves: CVE-2018-1334 Source advisory: OSV:GHSA-6MQQ-8R44-VMJC...

eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) +1 more potentially affected by CVE-2018-11760 via pyspark (>=2.1.2, <=2.2.0.post0)

pyspark PYPI version =2.1.2, =0.8.0, =1.0.0rc2, =1.0.1 - sourced-ml 0.4.5 Source cves: CVE-2018-11760 Source advisory: GHSA-FVXV-9XXR-H7WJ...

eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) +1 more potentially affected by CVE-2018-11760 via pyspark (>=2.1.2, <=2.2.0.post0)

pyspark PYPI version =2.1.2, =0.8.0, =1.0.0rc2, =1.0.1 - sourced-ml 0.4.5 Source cves: CVE-2018-11760 Source advisory: OSV:PYSEC-2019-169...

eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) +1 more potentially affected by CVE-2018-11760 via pyspark (>=2.1.2, <=2.2.0.post0)

pyspark PYPI version =2.1.2, =0.8.0, =1.0.0rc2, =1.0.1 - sourced-ml 0.4.5 Source cves: CVE-2018-11760 Source advisory: MEND:CVE-2018-11760...

Machine Learning to Detect Software Vulnerabilities

No one doubts that artificial intelligence AI and machine learning ML will transform cybersecurity. We just don't know how, or when. While the literature generally focuses on the different uses of AI by attackers and defenders ­ and the resultant arms race between the two ­ I want to talk about...

CVE-2018-5204

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

CVE-2018-5204

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

Design/Logic Flaw

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

CVE-2018-5204

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

CVE-2018-5204

CVE-2018-5204 affects ML Report versions 2.00.000.0000 through 2.18.628.5980. The vulnerability arises when an attacker can set arguments to an ActiveX method, enabling remote download and execution of arbitrary files. This leads to remote code execution. The CVE entry documents a high-severity i...

CVE-2018-5204: Unrestricted Upload of File with Dangerous Type

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution...

PT-2018-16798

Name of the Vulnerable Software and Affected Versions ML Report versions 2.00.000.0000 through 2.18.628.5980 Description The issue allows a remote attacker to download and execute a remote arbitrary file by setting the arguments to the activex method, which can be leveraged for code execution...

Wallarm New Open Source Module and Kaggle Hackathon

A key element of any security solution, whether its a WAF, NGWAF, RASP or even a SIEM or a classic IDS, is the ability to correctly detect whether an incoming API request is malicious. The traditional way to do it is using signatures and regular expressions regex. Some sets of signatures are...