CVE-2017-12173

It was found that sssd's sysdbsearchuserbyupnres function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this fla...

CVE-2017-12173

CVE-2017-12173 affects sssd: the sysdb_search_user_by_upn_res() function did not sanitize requests when querying the local cache, with versions before 1.16.0 vulnerable to injection. In centralized login environments, if a password hash is cached for a user, an authenticated attacker could retrie...

U.S. Dept Of Defense: SQL Injection vulnerability located at ████████

Summary: I have found a SQL Injection at ███████ in the ████ Portal. Description: The SQL injection is being caused by the unsanitized parameter of itemID= i immediately stopped testing when i verified it was possible to get the Current user and version of the Database. 1.The vulnerable url is :...

CVE-2018-0399

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system. Cisco Bug IDs: CSCvg71044...

LibTIFF Buffer Overflow Vulnerability (CNVD-2018-14917)

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A buffer overflow vulnerability exists in TIFFFindField in tifdirinfo.c in LibTIFF 4.0.9. An attacker can exploit this vulnerability via TIFFVGetField, TIFFVGetFieldDefaulted, TIFFVStripSize,...

VelotiSmart WiFi B-380 Camera - Directory Traversal

VelotiSmart WiFi B-380 Camera - Directory Traversal Title: Vulnerability in VelotiSmart Wifi - Directory Traversal Date: 12-07-2018 Scope: Directory Traversal Platforms: Unix Author: Miguel Mendez Z Vendor: VelotiSmart Version: B380 CVE: CVE-2018–14064 Vulnerability description...

[SECURITY] Fedora 28 Update: xapian-core-1.4.6-1.fc28

Xapian is an Open Source Probabilistic Information Retrieval Library. It offers a highly adaptable toolkit that allows developers to easily add adva nced indexing and search facilities to applications...

[SECURITY] Fedora 27 Update: xapian-bindings-1.4.6-1.fc27

Xapian is an Open Source Probabilistic Information Retrieval Library. It offers a highly adaptable toolkit that allows developers to easily add adva nced indexing and search facilities to applications. This package provides the files needed for scripts which use Xapian...

[SECURITY] Fedora 27 Update: xapian-core-1.4.6-1.fc27

Xapian is an Open Source Probabilistic Information Retrieval Library. It offers a highly adaptable toolkit that allows developers to easily add adva nced indexing and search facilities to applications...

ELO (Elektronischer Leitz-Ordner) 9 / 10 SQL Injection

Title: ====== ELO Elektronischer Leitz-Ordner 9/10 - Time-Based blind SQL injection Researcher: ======= Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2018-10197 Risk Information: ================= CVSS Base Score: 7.5 CVSS Vector:...

Ecessa ShieldLink Detection (SNMP)

Checks if the target is an Ecessa ShieldLink or PowerLink device, and, if so, retrieves the version using SNMP. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ownCloud: Possible to steal any protected files on Android

Hi. I have found an issue which allows to retrieve any files from /data/data/com.owncloud.android/ directory. The problem is in exported activity com.owncloud.android.ui.activity.ReceiveExternalFilesActivity which accepts a URI to download files. I see that you've added verification path...

CVE-2018-13129

SP8DE Token SPX is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-13130

Bitotal TFUND is a smart contract running on Ethereum. The mintTokens function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-13126

MoxyOnePresale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Integer overflow

Bitotal TFUND is a smart contract running on Ethereum. The mintTokens function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Integer overflow

GVToken Genesis Vision GVT is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Integer overflow

ATLANT ATL is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-13127

SP8DE PreSale Token DSPX is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Integer overflow

Spadeico is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...