9857 matches found
[SECURITY] Fedora 28 Update: kst-2.0.8-20.fc28
Kst is a real-time data viewing and plotting tool with basic data analysis functionality. Kst contains many powerful built-in features and is expandable with plugins and extensions. Main features of kst include: Robust plotting of live "streaming" data. Powerful keyboard and mouse plot...
CVE-2018-6608
In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...
thousand-islands-real-estate.com XSS vulnerability
Open Bug Bounty ID: OBB-592386 Description| Value ---|--- Affected Website:| thousand-islands-real-estate.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....
LeakVM - Research & Pentesting Framework For Android, Run Security Tests Instantly
LeakVM: Run security tests instantly. Why LeakVM : LeakVM fast security test on Android, by skipping the time-consuming build pen-testing laboratories, you can test on real devices or virtual devices. LeakVM makes researchers and pen-testers more productive since they can run the test on real tim...
real-madrid.ru XSS vulnerability
Open Bug Bounty ID: OBB-585826 Description| Value ---|--- Affected Website:| real-madrid.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Warning – 3 Popular VPN Services Are Leaking Your IP Address
Researchers found critical vulnerabilities in three popular VPN services that could leak users' real IP addresses and other sensitive data. VPN, or Virtual Private Network, is a great way to protect your daily online activities that work by encrypting your data and boosting security, as well as...
Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07)
When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulnerability affects Firefox ESR 52.7 and Firefox 59...
ALPINE-CVE-2018-1000122
A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage...
RTSP RTP buffer over-read
curl can be tricked into copying data beyond end of its heap based buffer. When asked to transfer an RTSP URL, curl could calculate a wrong data length to copy from the read buffer. The memcpy call would copy data from the heap following the buffer to a storage area that would subsequently be...
UBUNTU-CVE-2018-5130
When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulnerability affects Firefox ESR 52.7 and Firefox 59...
Mozilla Firefox memory corruption vulnerability (CNVD-2018-07089)
Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A memory corruption vulnerability exists in Mozilla Firefox. An attacker can exploit this vulnerability to cause a denial of service by sending packets with a mismatched RTP payload type in a...
accresrealestate.nl XSS vulnerability
Open Bug Bounty ID: OBB-575531 Description| Value ---|--- Affected Website:| accresrealestate.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
New 10 Second SLA For Rapid DDoS Mitigation
Two months ago, we updated the Imperva Incapsula SLA service level agreement to guarantee network and application layer DDoS attack mitigation in under 10 seconds. This commitment sets a new standard for time to mitigation TTM, made possible by improvements to our DDoS mitigation technology and...
Advanced Network Monitoring & MITM Attack Framework: Bettercap
Evil socket just announced the release of the second generation of bettercap , a complete re-implementation of the most complete and advanced Man-in-the-Middle attack framework. This release not only brings MITM attacks to the next level, but it aims to be the reference framework for network...
VIDEO: Unfiltered Endpoint Data – A Platform For Consolidated Endpoint Management
A PLATFORM FOR CONSOLIDATED ENDPOINT MANAGEMENT In our last post of this series, we talked about the key to better endpoint threat detection. It’s all about the data you collect. Across the board, endpoint security solutions use pre-defined signatures or rules to detect threats — only conducting...
Joomla! OS Property Real Estate 3.12.7 SQL Injection
Exploit Title: Joomla! Component OS Property Real Estate 3.12.7 - SQL Injection Dork: N/A Date: 22.02.2018 Vendor Homepage: https://www.joomdonation.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/os-property/ Version: 3.12.7 Category: Webapps...
OS Property Real Estate SQL Injection Vulnerability in Joomla!
Joomla! is an open source content management system CMS developed by the Open Source Matters team in the U.S. The system provides RSS feeds, site search, and other features. OS Property Real Estate is one of the components used to create real estate websites. A SQL injection vulnerability exists ...
