au.com.turingg:turingg-files (=0.0.1), au.com.turingg:turingg-mimak (=1.0.0) +408 more potentially affected by CVE-2018-12418 via com.github.junrar:junrar (=0.7)

com.github.junrar:junrar MAVEN version =0.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - au.com.turingg:turingg-files =0.0.1 - au.com.turingg:turingg-mimak =1.0.0 -...

com.zerotoheroes:hs-draft-odds (>=1.0.0 <=1.0.2), com.zerotoheroes:hs-game-converter (>=1.0.0 <=1.0.12) +32 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.17.0 <=2.17.4)

org.apache.camel:camel-jackson MAVEN version =2.17.0, =1.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.7, =1.1.0, =2.2.105, =2.2.105, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.7 and more Source cves: CVE-2016-8749 Source advisory: OSV:GHSA-VVJC-Q5VR-52Q6...

com.github.camel-labs:camel-labs-iot-cloudlet-document-driver (=0.1.0), com.github.camel-labs:camel-labs-iot-cloudlet-geofencing (=0.1.0) +104 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.10.0 <=2.16.4)

org.apache.camel:camel-jackson MAVEN version =2.10.0, =0.1, =0.0.9, =0.0.19, =0.0.8, =0.0.16, =0.0.17, =0.0.16, =1.5, =1.5, =1.5, =1.5, =1.9.3 - edu.amherst.acdc:acrepo-template-mustache =1.0.0 and more Source cves: CVE-2016-8749 Source advisory: OSV:GHSA-VVJC-Q5VR-52Q6...

ai.snips:play-mongo-bson_2.12 (>=0.5 <=0.5.1), al.bluecryst:bluecrystal (>=2.3.0 <=2.3.4) +4414 more potentially affected by CVE-2018-7489 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0 <=2.8.11)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.5, =2.3.0, =1.5.6, =4.2.1, =4.4.1, =1.0.0.RELEASE, =2.5.0-beta.0, =3.5.4-rc.0, =3.5.9, =3.5.9, =3.5.15, =3.5.15, =3.5.21 and more Source cves: CVE-2018-7489 Source advisory: OSV:GHSA-CGGJ-FVV3-CQWV...

XenoScan - Open Source Memory Scanner Written In C++

XenoScan is a memory scanner which can be used to scan the memory of processes to locate the specific locations of important values. These types of tools are typically used when hacking video games, as they allow one to locate the values representing the game's state in memory. XenoScan is writte...

canalprojects.info XSS vulnerability

Open Bug Bounty ID: OBB-678863 Description| Value ---|--- Affected Website:| canalprojects.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 28 Update: php-symfony-2.8.44-1.fc28

PHP framework for web projects...

Microsoft DirectX SDK - 'Xact.exe' Remote Code Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DIRECTX-SDK-XACT.EXE-TROJAN-FILE-CODE-EXECUTION.txt + ISR: Apparition Security Greetz: indoushka | Eduardo Vendor ============= www.microsoft.com Product ===========...

Memory Corruption Vulnerability in Inventec VS Series HMI Programming Software (HMITool6.0)

INVISION is a key high-tech enterprise under the National Torch Plan. Its main products include high, medium and low-voltage inverters, elevator intelligent control systems, servo systems, PLCs, HMIs, motors and electric spindles, SVGs, UPSs, photovoltaic inverters, energy-saving and...

WindowsSpyBlocker - Block Spying And Tracking On Windows

WindowsSpyBlocker is an application written in Go and delivered as a single executable to block spying and tracking on Windows systems. The initial approach of this application is to capture and analyze network traffic based on a set of tools. It is open for everyone and if you want to contribute...

CVE-2018-12467

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689...

CVE-2018-12466

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...

DEBIAN-CVE-2018-12466

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...

CVE-2018-12466

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...

CVE-2018-12467

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689...

CVE-2018-12466

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...

Cross site request forgery (csrf)

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all...

CVE-2018-14432

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all...

CVE-2018-14364

GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component...

CVE-2018-14364

GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component...