3789 matches found
PT-2020-8202
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with Android versions 4.4 through 7.x Description: An issue in the Email application on Samsung mobile devices allows attackers to send emails on behalf of any user via a broadcasted intent. Recommendations: For Android...
AIDA64 Engineer 6.20.5300 - (Report File) filename Buffer Overflow (SEH) Exploit
Exploit Title: AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow SEH Exploit Author: Hodorsec Version: v6.20.5300 Software Link: http://download.aida64.com/aida64engineer620.exe Vendor Homepage: https://www.aida64.com/products/aida64-engineer Tested on: Win7 x86 SP1 - Build 7601...
CVE-2017-5651
In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...
PT-2020-2140
Name of the Vulnerable Software and Affected Versions GnuTLS versions 3.6.3 through 3.6.12 Description The issue is related to the send client hello function in the GnuTLS cryptographic library, which has shortcomings in the used cryptographic algorithms. This can allow a remote attacker to gain...
CVE-2020-9455
The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users with minimal privileges to send arbitrary emails on behalf of the site via classrmuserservices.php sendemailuserview...
openthread:ip6-send-fuzzer: Index-out-of-bounds in ot::EnergyScanServer::HandleScanResult
Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5686760173731840 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ip6-send-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...
CVE-2020-9364
An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactformupload parameter. An attacker could exploit this...
PT-2020-20612 · Creative · Creative Contact Form
Name of the Vulnerable Software and Affected Versions: Creative Contact Form extension versions 4.6.2 and earlier Description: A directory traversal issue resides in the filename field for uploaded attachments via the creativecontactform upload parameter in the helpers/mailer.php file. This allow...
openthread:ip6-send-fuzzer: Stack-buffer-overflow in ot::ExtendedTlv::GetLength
Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5751684162912256 Project: openthread Fuzzing Engine: honggfuzz Fuzz Target: ip6-send-fuzzer Job Type: honggfuzzasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash...
How to Share Files Securely Online: Dropbox, Firefox Send, and More
There's no shortage of options for sharing documents and more with friends, family, and colleagues. These are your best bets...
systemd-machined Incorrect Reference Decrement
systemd: systemd-machined decrements reference count when references still held I've been looking at the version of systemd shipped in Fedora 31 approximately ef677436aa203c24816021dd698b57f219f0ff64 I noticed that systemd-machined caches image objects, and uses reference counting to keep track o...
CVE-2020-2093
A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient...
PT-2019-16030
Name of the Vulnerable Software and Affected Versions Email Subscribers & Newsletters versions prior to 4.2.3 Description The issue allows authenticated users with Subscriber or greater access to send test emails from the administrative dashboard on behalf of an administrator. This occurs because...
WordPress Email Subscribers & Newsletters Elevation of Privilege Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Email Subscribers & Newsletters is an email subscription and newsletter plugin used in it. An elevation of privilege vulnerability exis...
Intesync Solismed Cross-Site Request Forgery Vulnerability
Intesync Solismed is a clinic management system designed for use by independent and free clinics. A cross-site request forgery vulnerability exists in Intesync Solismed. An attacker could exploit the vulnerability to send unintended requests to the server via an affected client...
PT-2019-12898
Name of the Vulnerable Software and Affected Versions AUO SunVeillance Monitoring System versions prior to 1.1.9e Description The issue allows an attacker to carry a SQL Injection payload to the server, enabling them to read privileged data. This is possible through several parameters, including...
UBUNTU-CVE-2019-18835
Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /sendjoin, /sendleave, and /invite may not be correctly signed, or may not come from the expected servers...
glusterfs: Null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c
A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in sendbrickreq function in glusterfsd/src/gfattach.c may be used to cause denial of service...
IBM Cloud Orchestrator Security Bypass Vulnerability
IBM Cloud Orchestrator is a suite of cloud management solutions from IBM in the United States. The program provides extended internal and external deployment of cloud services and application program interfaces and tools to extend the integration with existing environments and other functions. A...