Denial Of Service (DoS)

GnuTLS is vulnerable to denial of service DoS. It is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application...

Exploit for NULL Pointer Dereference in Openssl

CVE-2020-1967 Proof of concept exploit about OpenSSL signature...

Denial Of Service (DoS)

krb5 is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference flaw was discovered in the MIT Kerberos Generic Security Service Application Program Interface GSS-API library. A remote, authenticated attacker could use this flaw to crash any server application...

Denial Of Service (DoS)

java is vulnerable to denial of service. A flaw in the Java API for XML Web Services JAX-WS service endpoint handling could allow a remote attacker to cause a denial of service on the server application hosting the JAX-WS service endpoint...

Trend Micro OfficeScan Directory Traversal (CVE-2019-18187)

A directory traversal vulnerability exists in Trend Micro's OfficeScan. The vulnerability is due to insufficient handling of directory traversal characters in uploaded ZIP archives. A remote, authenticated attacker could exploit this vulnerability by sending a request containing a crafted ZIP fil...

China Chopper still active 9 years later

By Paul Rascagneres and Vanja Svajcer. Introduction Threats will commonly fade away over time as they're discovered, reported on, and detected. But China Chopper has found a way to stay relevant, active and effective nine years after its initial discovery. China Chopper is a web shell that allows...

grapheneX - Automated System Hardening Framework

grapheneX In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one. Reducing available ways of attack typically...

PT-2019-5600

Name of the Vulnerable Software and Affected Versions Oracle Database Server Application Express versions 5.1 and 18.2 Description The issue is related to insufficient access control in the Application Express component, allowing a low-privileged attacker with a valid account and network access v...

March 12, 2019—KB4489881 (Monthly Rollup)

None None...

March 12, 2019—KB4489883 (Security-only update)

None None...

March 12, 2019—KB4489891 (Monthly Rollup)

None None...

February 12, 2019—KB4487028 (Security-only update)

None None...

February 12, 2019—KB4486993 (Security-only update)

None None...

CVE-2019-7659

Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service application abort or possibly have unspecified other impact if a server application is built with the -DWITHCOOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ librarie...

Code injection

Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service application abort or possibly have unspecified other impact if a server application is built with the -DWITHCOOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ librarie...

CVE-2019-7659

Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service application abort or possibly have unspecified other impact if a server application is built with the -DWITHCOOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ librarie...

SolarWinds Server & Application Monitor (SAM) Detection (Windows SMB Login)

SMB login-based detection of SolarWinds Server & Application Monitor SAM. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

CVE-2018-18982: Improper Neutralization of Special Elements used in an SQL Command

NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution...

PT-2018-14751

Name of the Vulnerable Software and Affected Versions NUUO CMS versions 3.3 and prior Description The web server application in NUUO CMS allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution. Recommendations Fo...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Aspera Transfer Cluster Manager, Faspex on Demand, Server on Demand, Application on Demand, and Azure on Demand (CVE-2016-6302 CVE-2016-6304 CVE-2016-6303 CVE-2016-2182 CVE-2016-2177 ...)

Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM Aspera Transfer Cluster Manager, IBM Aspera Faspex on Demand, IBM Aspera Server on Demand, IBM Aspera Application on Demand, and IBM Aspera Azure on Demand. IBM Aspera Transf...