[SECURITY] Fedora 29 Update: lua-5.3.5-3.fc29

Lua is a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Lua is free software. Lua combines simple procedural syntax with powerful data description constructs based on associative arrays and...

UA-Parser Denial of Service Vulnerability

UA-Parser is a multi-language port of the User Agent String Parser for BrowserScope. A denial of service vulnerability exists in UA-Parser 2015-05-14 and later versions. An attacker can exploit the vulnerability by sending a large number of requests quickly to cause a website to become unavailabl...

[SECURITY] Fedora 29 Update: python-django-2.0.10-1.fc29

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

auroracentral.com XSS vulnerability

Open Bug Bounty ID: OBB-715242 Description| Value ---|--- Affected Website:| auroracentral.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

Investigate Inline Hooks: PE-sieve

PE-sieve is a light-weight tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory...

Intel Rapid Store Technology Input Validation Vulnerability

A security vulnerability exists in the installer in Intel Rapid Store Technology RST versions prior to 16.7, which stems from the program failing to adequately validate input. A local attacker could exploit the vulnerability to elevate privileges or cause a denial of service...

Intel Rapid Storage Technology User Interface And Driver 15.9.0.1015 DLL Hijacking

Hi @ll, the executable installer of the Intelr Rapid Storage Technology Intelr RST User Interface and Driver, version 15.9.0.1015 LATEST for Windows 7, released 11/14/2017, available from via is SURPRISE! vulnerable! CVSS score: 7.5/HIGH CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H See Intel's...

The vulnerability of the Fast Transition function in the 802.11r access point implementation of Cisco IOS Access Points allows a attacker to cause a service failure.

The vulnerability of the Fast Transition function in the 802.11r access point implementation of Cisco IOS Access Points is caused by errors in the timer mechanisms when processing certain networking events. Exploiting this vulnerability allows an attacker to cause service failure by sending...

CVE-2018-3635

Insufficient input validation in installer in Intel Rapid Store Technology RST before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access...

CVE-2018-3635

Insufficient input validation in installer in Intel Rapid Store Technology RST before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access...

[SECURITY] Fedora 29 Update: python-django-2.0.9-1.fc29

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Oracle Database Server 'Rapid Home Provisioning' Component Unspecified Vulnerability

Oracle Database Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unspecified vulnerability in Intel NVMe and RSTe driver pack installers

Intel NVMe and RSTe are both products of Intel Corporation.Intel NVMe is an open logical device interface specification for accessing non-volatile storage media connected via the PCI Express PCIe bus.RSTe is an embedded rapid storage software.driver pack installers is one of the driver installers...

Intel Rapid Web Server webserver component information disclosure vulnerability

Intel Rapid Web Server is a rapid storage server from Intel Corporation. webserver is one of the web server components. A security vulnerability exists in the webserver component of Intel Rapid Web Server version 3. An attacker can exploit this vulnerability by accessing the network to obtain...

CVE-2018-12161

Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially disclose information via network access...

CVE-2018-12161

CVE-2018-12161 affects Intel Rapid Web Server 3 webserver component. The issue is insufficient session validation that may allow an unauthenticated user to disclose information over the network. Affected product: Intel Rapid Web Server 3 webserver component. Impact: information disclosure with ne...

CVE-2018-12161

Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially disclose information via network access...

Informatica: Cisco RCE

The researcher was able to complete RCE attack and download sensitive files. We have mitigated it by hardening the machine and port. There are opened classical cisco smart install service, which was successfully exploited. Informatica is a fAsTeSt!!! bug fixer in my life. Closing vulnerability in...

NASA openVSP 3.16.1 - Denial of Service (PoC)

Exploit Title: NASA openVSP 3.16.1 - Denial of Service PoC Exploit Author : L0RD Date: 2018-08-28 Vendor Homepage : https://software.nasa.gov/software/LAR-17491-1 Software link: https://github.com/nasa/OpenVSP Version: 3.16.1 Tested on: Windows 10 CVE: N/A Description : The Vehicle Sketch Pad VSP...

Security Competition Infrastructure Automation Framework: Laforge

Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for highly productive remote collaboration. The Laforge engine uses a...