4824 matches found
AlienVault USM 5.4.2 Cross Site Request Forgery
RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AlienVault USM Vendor URL: https://www.alienvault.com Type: Cross-Site Request Forgery CWE-253 Date found: 2017-09-22 Date published: 2017-10-13 CVSSv3 Score: 6.5...
AlienVault Unified Security Management (USM) 5.4.2 - Cross-Site Request Forgery
AlienVault Unified Security Management USM 5.4.2 - Cross-Site Request Forgery 1. ADVISORY INFORMATION ======================= Product: AlienVault USM Vendor URL: https://www.alienvault.com Type: Cross-Site Request Forgery CWE-253 Date found: 2017-09-22 Date published: 2017-10-13 CVSSv3 Score: 6.5...
White House Chief of Staff John Kelly's Cell Phone was Tapped
Politico reports that White House Chief of Staff John Kelly's cell phone was compromised back in December. I know this is news because of who he is, but I hope every major government official of any country assumes that their commercial off-the-shelf cell phone is compromised. Even allies spy on...
CVE-2016-3309
creationtimestamp| type| source ---|---|--- 2017-10-06 16:06:20+00:00| exploited| https://t.me/canyoupwnme/2393 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:28:24+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971375 2025-02-23 02:10:11+00:00...
UBUNTU-CVE-2017-14955
CheckMK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report...
PT-2017-13776 · Mathias Kettner +1 · Checkmk +1
Name of the Vulnerable Software and Affected Versions: Check MK versions prior to 1.2.8p26 Description: The issue arises from a race condition in the failed-login save feature, allowing remote attackers to obtain sensitive user information by reading a GUI crash report. This occurs due to the...
Announcing the Windows Defender Advanced Threat Protection ISO 27001 audit assessment report
The security and privacy of customer data are our top priority. Our goals are simple: to operate our services with the security and privacy you expect from Microsoft, and to give you accurate assurances about our security and privacy practices. In line with our commitment to provide customers the...
Bitwarden: Export vault feature is vulnerable to CSV injection
Hello guys I don't know if you care about this issue but it seems that the export feature in your https://vault.bitwarden.com//tools is vulnerable to CSV injection. If a CSV contains a malicious command it may have big impact Even though there is a popup notification for users before opening the...
Apple iOS 10.2 - Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response
Apple iOS 10.2 - Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1289 The exploit gains code execution on the Wi-Fi firmware on the iPhone 7. The exploit has been tested against the Wi-Fi firmware as...
CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access...
CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access...
Design/Logic Flaw
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access...
CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access...
UBUNTU-CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access...
CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access...
CVE-2017-12157
CVE-2017-12157 affects Moodle 3.x where certain course reports allow teachers to view details about users in groups they cannot access. The issue is described in multiple advisories and CVEs linked to Moodle sensitive information disclosure. Connected sources confirm affected product is Moodle, w...
The vulnerability of the UE component in the Android CAF-release operating system allows a perpetrator to compromise privacy, integrity, and accessibility.
The vulnerability of the UE component in the Android CAF-release operating system is related to positioning errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information when the UE driver sends unprotected...
Ledger CLI Tags Parsing Code Execution Vulnerability
Summary An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause a integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability. Tested...
NexusPHP reports.php file SQL injection vulnerability
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the reports.php file in NexusPHP version 1.5. A remote attack can exploit this vulnerability to execute arbitrary SQL commands with the 'delreport'...
Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2017-27864)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm group suffers from a piece of information disclosure vulnerability that...