Deepfakes FakeApp tool (briefly) includes cryptominer

A few weeks ago, we took a look at a forum dedicated to Deepfake clips where the site was pushing Coinhive mining scripts in the website's HTML code. As it turns out, there's been another mining blow-out in the form of one of the apps used to make the fakes. That's right—a tool designed to push...

WeiPHP reception xss vulnerability

No description provided by source...

onethink reception code execution vulnerability

No description provided by source...

Design/Logic Flaw

The Bzrtp library aka libbzrtp 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by leveraging a missing HVI check on DHPart2 packet reception...

Lenovo SHAREit Wifi hotspot component access rights vulnerability (CNVD-2016-00491)

Lenovo SHAREit 茄子快传 for Android is a set of Android-based file-sharing software from Lenovo, China.Wifi hotspot is one of the Wifi hotspot components. An access privilege vulnerability exists in the Wifi hotspot component in previous versions of Lenovo SHAREit for Android 3.5.48ww, due to the...

CVE-2015-6410

The Mobile and Remote Access MRA services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283...

oysterpartnership.com XSS vulnerability

Vulnerable URL: http://www.oysterpartnership.com/jobboard/cands/jobResults.asp?c=1=Reception+Jobs%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2015 Latest check for patch:| 23.11.2015 00:10 GMT Vulnerability type:| XSS Vulnerability...

DEBIAN-CVE-2015-5279

Heap-based buffer overflow in the ne2000receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service instance crash or possibly execute arbitrary code via vectors related to receiving packets...

UBUNTU-CVE-2015-5278

The ne2000receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service infinite loop and instance crash or possibly execute arbitrary code via vectors related to receiving packets...

KesionCMS multi-system reception upload vulnerability-vulnerability warning-the black bar safety net

KesionICMS smart built Station system V2. 5 KesionEshop online store system X1. 0. 1 4 1 2 0 6 KesionIMALL online store system V2. 5 KesionEdu network school training system V2. 5 Due to the above system at the front Desk are using UEditor editor //should be a secondary development caused by this...

Cicada-known Enterprise Portal system v2. 5 reception getshell-a vulnerability warning-the black bar safety net

See module/file/control.php code area public function ajaxUpload$uid $file = $this-file-getUpload'imgFile'; $file = $file0; if$file if!$ this-file-checkSavePath $this-sendarray'error' = 1, 'message' = $this-lang-file-errorUnwritable; moveuploadedfile$file'tmpname', $this-file-develop this program...

[WAF-FLE] Web application firewall: fast log and event console

WAF-FLE is a OpenSource Console for ModSecurity, it allow the modsec admin to view and search events sent by mlogc modsecurity event log handler. Features : Central event console Support Modsecurity in “traditional” and “Anomaly Scoring” Able to receive events sent from mlogc in real time or in...

Multiple KYOCERA mobile devices may reboot during email reception

Overview Multiple KYOCERA mobile devices contain an issue where the device may reboot when receiving an email in an invalid format. Multiple KYOCERA mobile devices contain an issue where the device may reboot when receiving an email in an invalid format. When this issue occurs, the device will...

JP1/NETM/DM SubManager and JP1/NETM/DM Client Process Termination Vulnerability

Overview JP1/NETM/DM SubManager and JP1/NETM/DM Client, enabled with the JP1 event notification setting, have a process termination vulnerability where process may terminate when error occurs while receiving job execution requests. Impact A computer may not be able to receive job execution reques...

Important: kernel security and bug fix update

2.6.18-53.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 6263574 ...

[Full-disclosure] Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Advisory ID: cisco-sa-20070808-IOS-voice http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...

Buffer overflow

Buffer overflow in the Session Initiation Protocol SIP User Access Client UAC message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service call reception outage via a malformed SIP message...

CVE-2007-3318

Buffer overflow in the Session Initiation Protocol SIP User Access Client UAC message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service call reception outage via a malformed SIP message...

Buffer overflow

Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library ZVBI before 0.2.25 allows attackers to cause a denial of service application crash and possibly execute arbitrary code via long data during a reception error. NOTE: some of these details...

DEBIAN-CVE-2007-3121

Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library ZVBI before 0.2.25 allows attackers to cause a denial of service application crash and possibly execute arbitrary code via long data during a reception error. NOTE: some of these details...