71 matches found
Ruby: Source code disclosed via S3 Bucket
Summary The Ruby having an Amazon S3 bucked named http://rubyci.s3.amazonaws.com/ which lists some of their log files. Those logs having some informations to check the source code server side directories. Steps to Reproduce 1. direct to http://rubyci.s3.amazonaws.com/ which having READ Permission...
Rockstar Games: Unquoted Service Path in "Rockstar Game Library Service"
In this report, the researcher discovered a flaw in a Registry entry created by the Rockstar Service, which is used to install, update, and uninstall Rockstar Games titles on Windows PCs. Specifically, the ImagePath setting used by the entry was not enclosed in quotation marks. Using quotation...
CVE-2019-15161
rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...
Design/Logic Flaw
Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox 68...
Information Disclosure of Installed Extensions
It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...
CVE-2018-1344 NetIQ iManager Communication Downgrade Attack
Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1...
LocalTapiola: The parameter in the POST query allows to control size of returned page which in turn can lead to the potential DOS attack
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Do not remove any subsections of this template. If the report is not complete, we will most likely close your report with no further action. QUALITY BEFORE QUANTITY. Remember, the more...
CVE-2017-14520
In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...
Authentication flaw
In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...
CVE-2017-14520
In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...
CVE-2017-14520
Poppler 0.59.0 contains a vulnerability where a floating point exception can occur in Splash::scaleImageYuXd() inside Splash.cc when processing crafted PDFs, potentially enabling an attack via malicious files. Connected advisories from multiple distributions (openSUSE SUSE-2018:648, SUSE-SU-2018:...
CVE-2017-14520
In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...
CVE-2017-14520
In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...
CVE-2017-14520
In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...
Linux ASLR vulnerabilities: an attacker with unlimited disable ASLR（CVE-2 0 1 6-3 6 7 2-the vulnerability warning-the black bar safety net
! Recently, security personnel repair a Linux ASLR in a relatively old vulnerability, with x86 devices on the 3 2-bit application usage rights of any user, by the RLIMITSTACK resource is set to“unlimited”you can disable ASLR. The vulnerability CVE number CVE-2 0 1 6-3 6 7 2, The CNNVD number of...
es.trabajo.org XSS vulnerability
Open Bug Bounty ID: OBB-66920 Description| Value ---|--- Affected Website:| es.trabajo.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
Microsoft XML Core Services vulnerability is still computer users face the biggest risk-vulnerability warning-the black bar safety net
Recently reported, Microsoft XML Core Services vulnerability is still computer users face the biggest risk, and more than 4 3% of users are running a vulnerable version. Can you explain why these problems still exist as well as to alleviate the problem the best way? Michael Cobb: the Secunia in t...
How to relieve Microsoft XML vulnerability risk-the vulnerability warning-the black bar safety net
Recently reported, Microsoft XML Core Services vulnerability is still computer users face the biggest risk, and more than 4 3% of users are running a vulnerable version. Can you explain why these problems still exist as well as to alleviate the problem the best way? ! How to relieve Microsoft XML...
Tor Project Warns of Possible Upcoming Attack on Network
The Tor Project is warning that an unnamed attacker is planning to try to cripple the network by seizing directory authorities, the servers that help Tor clients find Tor relays in the network. Tor officials said that the network right now is still safe to use, and also emphasized that they are...
