About the security content of macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave

About the security content of macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave This document describes the security content of macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. About Apple security updates For our...

Metasploit Framework 6.0.11 - msfvenom APK template command injection Exploit

Exploit Title: Metasploit Framework 6.0.11 - msfvenom APK template command injection Exploit Author: Justin Steven Vendor Homepage: https://www.metasploit.com/ Software Link: https://www.metasploit.com/ Version: Metasploit Framework 6.0.11 and Metasploit Pro 4.18.0 CVE : CVE-2020-7384 !/usr/bin/e...

Umbraco CMS 7.12.4 - Remote Code Execution (Authenticated)

Exploit Title: Umbraco CMS 7.12.4 - Remote Code Execution Authenticated Date: 2020-03-28 Exploit Author: Alexandre ZANNI noraj Based on: https://www.exploit-db.com/exploits/46153 Vendor Homepage: http://www.umbraco.com/ Software Link: https://our.umbraco.com/download/releases Version: 7.12.4...

[SECURITY] Fedora 33 Update: kernel-5.10.10-200.fc33

The kernel meta package...

CVE-2020-5477

...

CVE-2019-11317

...

CVE-2020-13217

...

CVE-2020-13194

...

CVE-2020-13197

...

CVE-2018-10340

...

CVE-2020-28322

...

CVE-2020-28311

...

GHSA-29V9-2FPX-J5G9 CSV Injection vulnerability with exported contact lists in Mautic

Impact Mautic versions before 2.13.0 had a vulnerability that allowed a CSV injection with exported contact lists - https://www.owasp.org/index.php/CSVInjection. Patches Update to 2.13.0 or later. Workarounds None. For more information If you have any questions or comments about this advisory:...

OSV-2018-367 Use-of-uninitialized-value in cf2_glyphpath_lineTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8323 Crash type: Use-of-uninitialized-value Crash state: cf2glyphpathlineTo cf2glyphpathcloseOpenPath cf2glyphpathmoveTo...

Exploit for Deserialization of Untrusted Data in Liferay Liferay_Portal

CVE-2020-7961 Exploit script for CVE-2020-7961 Unauthenticated...

OSV-2017-22 Heap-buffer-overflow in opj_tcd_mct_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3331 Crash type: Heap-buffer-overflow READ 4 Crash state: opjtcdmctdecode opjtcddecodetile opjj2kdecodetile...

CVE-2020-6748

...

CVE-2020-6709

...

CVE-2020-6706

...

Hack the US Army for good with ‘Hack The Army’ bug bounty program

By Sudais Asif For now, only those with invitation can join the new bug bounty program. Here's what we know so far and what to expect. This is a post from HackRead.com Read the original post: Hack the US Army for good with Hack The Army bug bounty program...