9859 matches found
Meetecho Janus Competitive Conditions Issue Vulnerability
Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. Meetecho Janus suffers from a Contested Condition Issue vulnerability that can be exploited by an attacker to cause certain references to be prematurely or excessively released...
Meetecho Janus has an unspecified vulnerability
Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. Meetecho Janus has a security vulnerability discovered in Janus via 0.9.1. janusaudiobridge.c has a double mutex lock unlock when listing private rooms in AudioBridge. No details of the vulnerability are provided at this...
zsh: insecure dropping of privileges when unsetting PRIVILEGED option
A flaw was found in zsh. When unsetting the PRIVILEGED option, the shell sets its effective user and group IDs to match their respective real IDs. When the RUID and EUID were both non-zero, it is possible to regain the shell's former privileges. Also, the setopt built-in did not correctly report...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Unspecified Vulnerability in Mitel Networks 6800 and 6900 SIP Series
Mitel Networks 6800 SIP and Mitel Networks 6900 SIP are both products of Mitel Networks Canada.Mitel Networks 6800 SIP is a 6800 SIP series IP phone.Mitel Networks 6900 SIP is a 6900 Mitel Networks 6900 SIP is a 6900 SIP series IP phone. A security vulnerability exists in the SRTP 128-bit key...
Crescendo: Real Time Event Viewer for macOS
Prior to 2017, researchers couldn’t easily monitor actions performed by a process on macOS and had to resort to coding scripts that produced low level system call data. FireEye released Monitor.app in 2017 that enabled collection of information on macOS at a higher level; at a simplified data set...
Arbitrary File Deletion Vulnerability in ejucms
EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files, including system files...
TwitWork - Monitor Twitter Stream
Monitor twitter stream. TwitWork use the twitter stream which allows you to have a tweets in real-time. There is an input that allows you to filter the flow on one or more keywords or on an @ based on twitter tracking Demo This is a demo of export data on keyword "Coronavirius"...
EjuCMS suffers from SQL injection vulnerability (CNVD-2020-21980)
EJU real estate system ejucms is a set of localized O2O real estate website platform system. EjuCMS has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...
File Upload Vulnerability in EjuCMS
EjuCMS is a localized O2O real estate website platform system. EjuCMS has a file upload vulnerability that can be exploited by attackers to gain access to the server...
Cacti v1.2.8 - Unauthenticated Remote Code Execution Exploit
Exploit for php platform in category web applications Exploit Title: Cacti v1.2.8 - Unauthenticated Remote Code Execution Metasploit Exploit Author: Lucas Amorim sh286s CVE: CVE-2020-8813 Vendor Homepage: https://cacti.net/ Version: v1.2.8 Tested on: Linux This module requires Metasploit:...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
curl: RTSP RTP buffer over-read
A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage...
E-House CMS of Hainan E&Y Technology Co., Ltd. suffers from a logic flaw vulnerability
EJU real estate system ejucms is a set of localized O2O real estate website platform. Hainan EJU Technology Co., Ltd. ejucms CMS logic flaws exist in the vulnerability, attackers can use the vulnerability to create any directory...
CVE-2020-8813
graphrealtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege...
Microsoft Insider Risk Management and Communication Compliance in Microsoft 365 now generally available
Microsoft Insider Risk Management and Communication Compliance in Microsoft 365—now generally available—help organizations address internal risks, such as IP theft or code of conduct policy violations. The new Microsoft Insider Risk Management solution helps to quickly identify, detect, and act o...
Deal: Cloud And Networking Certification Training ~ Get 97% OFF
Cloud computing and networking are two of the most significant areas of growth in the IT business. Companies need engineers who can maintain distributed software and keep the company connected. If you want to work in either niche, the Essential Cloud & Networking Certification Training Bundle...
EjuCMS suffers from SQL injection vulnerability
EjuCMS is a localized O2O real estate website platform system. EjuCMS suffers from an SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...
curl: RTSP RTP buffer over-read
A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage...
chromium-browser: Out of bounds write in WebRTC
Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...