PT-2018-2986 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.91 Linux kernel versions prior to 4.19.13 Description: The issue is related to a use-after-free problem in the Linux kernel's KVM hypervisor when processing posted interrupts with nested virtualization...

Arbitrary Command Execution Vulnerability in the Call Center of Shenzhen Jishi Communication Co.

The call center of Shenzhen Jishu Communication Co., Ltd. is a new generation of enterprise-level call center system. An arbitrary command execution vulnerability exists in the call center of Shenzhen JTS Communications Co. By constructing the $POST parameter without any filtering measures, it...

Twitter Ex-CEO Dick Costolo Got Hacked!

The same group of teenage hackers that hacked Facebook CEO Mark Zuckerberg's Twitter and Pinterest accounts have hacked another the Twitter account of another high-profile person. This time, it's Twitter's ex-CEO, Dick Costolo. The hacker group from Saudi Arabia, dubbed OurMine, compromised Twitt...

DEBIAN-CVE-2016-2145

The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows remote attackers to cause a denial of service segmentation fault and process crash via a crafted POST data...

AST-2013-004: Remote Crash From Late Arriving SIP ACK With SDP

Asterisk Project Security Advisory - AST-2013-004 Product Asterisk Summary Remote Crash From Late Arriving SIP ACK With SDP Nature of Advisory Remote Crash Susceptibility Remote Unauthenticated Sessions Severity Major Exploits Known None Reported On February 11, 2013 Reported By Colin Cuthbertson...

CKEditor 4.0.1 多个安全漏洞

CKEditor是一款在线文字编辑器 CKEditor存在多个安全漏洞，允许攻击者利用漏洞进行跨站请求伪造，跨站脚本攻击及获取路径信息 0 CKEditor 4.0.1 厂商解决方案 目前没有详细解决方案提供： http://ckeditor.com/ =========================================== Vulnerable Software: ckeditor 4.0.1 standard Download:...

Spoofing and script injection through location.hash — Mozilla

Security researcher Mariusz Mlynski reported an issue with spoofing of the location property. In this issue, writes to location.hash can be used in concert with scripted history navigation to cause a specific website to be loaded into the history object. The baseURI can then be changed to this...

USAA Phishing Scam and Malware Campaign

US-CERT is aware of public reports of an active spear-phishing attack via email messages directed at United Services Automobile Association USAA members. These messages contain the subject line "Deposit Posted" and contain a randomly generated four-digit number placed in the USAA security zone...

Web Worker Array Handling Heap Corruption Vulnerability — Mozilla

Security researcher Orlando Barrera II of SecTheory reported, via TippingPoint's Zero Day Initiative, that Mozilla's implementation of Web Workers contained an error in its handling of array data types when processing posted messages. This error could be used by an attacker to corrupt heap memory...

Apache Tomcat information disclosure vulnerability

Overview Apache Tomcat from The Apache Software Foundation contains an information disclosure vulnerability. Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. Apache Tomcat contains a vulnerability which may result in...

JVN#66905322: Apache Tomcat information disclosure vulnerability

Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. Apache Tomcat contains a vulnerability which may result in the disclosure of POSTed content from a previous request. Impact A remote attacker could possibly obtain user...

Buffer overflow

Multiple buffer overflows in the 1 vGetPost and 2 main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing "Submit" in an sslinvoice action, and allow remote attackers to have an unknown impact...

CVE-2002-1719

Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages...

CVE-2002-1719

Technical details about CVE-2002-1719 are not publicly provided in the supplied documents; no affected products, versions, root cause, or remediation are specified here. Monitor for updates.

CVE-2002-1719

Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages...

CVE-2002-1661

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service infinite loop when leafnode requests a cross-posted article to one group whose name is a prefix of another group...