FLIR Thermal Camera FFCPTD - Information Disclosure

FLIR Thermal Camera FFCPTD - Information Disclosure FLIR Systems FLIR Thermal Camera F/FC/PT/D Multiple Information Disclosures Vendor: FLIR Systems, Inc. Product web page: http://www.flir.com Affected version: Firmware version: 8.0.0.64 Software version: 10.0.2.43 Release: 1.4.1, 1.4, 1.3.4 GA,...

XenMobile is unable to identify the group membership of users

Although XenMobile can find both user objects and group objects in Active Directory, XenMobile is unable to enumerate the group membership of user objects. This can result in no MAM resources being deployed unless they are bound to the 'All Users' Delivery Group. You may also find that resources...

Google Chrome Will Mark FTP Resources As “Not Secure”

By Uzair Amir It seems like Google is making some serious changes in This is a post from HackRead.com Read the original post: Google Chrome Will Mark FTP Resources As Not Secure...

Denial of Service Vulnerability in Wireless Suzhou APP Registry

Wireless Suzhou APP is the "Internet +" city life application software created by Suzhou Radio and TV Station Group. A denial of service vulnerability exists in the registration of Wireless Suzhou APP, which allows an attacker to send unlimited verification codes to a cell phone, consuming server...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the REST server. An attacker can execute commands as the user by producing a malicious link that, if clicked while the user is logged in, exploits the server. PoC Attacker puts something like this int...

Per app VPN for android - Cannot connect to internal resources.

After setting up per app VPN for android, the customer is unable to connect to internal resources. Google chrome launches but page comes up in a blank white screen .. VPN connections shows as not sending or receiving packets...

CVE-2017-14223

In libavformat/asfdecf.c in FFmpeg 3.3.3, a DoS in asfbuildsimpleindex due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would...

CVE-2017-14223

In libavformat/asfdecf.c in FFmpeg 3.3.3, a DoS in asfbuildsimpleindex due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would...

Ringtone Duo App Has Denial of Service Vulnerability

Ringtone Duo APP is a cell phone ringtone downloader. Ringtone Duo APP suffers from a denial-of-service vulnerability, where an attacker consumes server resources and causes a denial-of-service by sending unlimited CAPTCHAs to cell phones...

CVE-2017-14171

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsvparseNSVfheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted NSV file, which claims a large "tableentriesused" field in the header but does not contain sufficient backing data, is provided, th...

CVE-2017-14172

In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length"...

Denial of Service Vulnerability in EZZY APP for Android

EZZY APP is a car intelligent sharing platform APP created by Beijing Daimeng Technology Co. A denial of service vulnerability exists in the Android version of EZZY APP, which allows an attacker to traverse a cell phone number and consume server resources by sending an unlimited number of...

CVE-2017-1458

IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128377...

CVE-2017-1458

CVE-2017-1458 affects IBM QRadar Network Security 5.4. The issue is an XML External Entity (XXE) vulnerability in XML data processing, potentially exposing sensitive information or causing memory/resource depletion. The IBM bulletin states a fixed version: firmware 5.4.0.2. Remediation options in...

CVE-2017-12713

An Incorrect Permission Assignment for Critical Resource issue was discovered in Advantech WebAccess versions prior to V8.220170817. Multiple files and folders with ACLs that affect other users are allowed to be modified by non-administrator accounts...

CVE-2017-13775

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

CVE-2017-13775

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

Yiwu Shopping App has Denial of Service Vulnerability

Yiwubuy APP is a B2B small commodities wholesale and retail procurement platform. Yiwu Shopping APP has a denial-of-service vulnerability that allows attackers to traverse cell phone numbers and consume server resources by sending unlimited verification codes to cell phones, resulting in a denial...

FAQ: NetScaler SD-WAN Center and Hardware Requirements

Question: Is It Possible to Increase the Cores and RAM of an Existing SD-WAN Center VM? Answer: Yes it is possible to increase the cores and RAM of an existing SD-WAN Center VM. If the hypervisor has sufficient resources shutdown the SD-WAN Center instance and increase the Cores and RAM to the...

Atlassian OAuth Server-Side Request Forgery Vulnerability

Atlassian OAuth Plugin is an authorization plugin from Atlassian Australia for accessing personal Atlassian software data. A security vulnerability exists in the IconUriServlet in the Atlassian OAuth Plugin. A remote attacker could exploit the vulnerability to access internal network resources or...