8573 matches found
CVE-2019-13178
modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set...
SUSE-SU-2019:1490-1 Security update for libvirt
This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. bsc1111331 - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling MSBDS - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling MFBDS -...
CVE-2019-12460
Web Port 1.19.1 allows XSS via the /access/setup type parameter...
Design/Logic Flaw
Web Port 1.19.1 allows XSS via the /access/setup type parameter...
CVE-2019-12460
Web Port 1.19.1 allows XSS via the /access/setup type parameter...
CVE-2019-12460
CVE-2019-12460 affects Web Port 1.19.1 with a reflected XSS flaw exploitable via the /access/setup?type parameter. The issue stems from unsanitized input in the setup endpoint, enabling an attacker to inject and execute script in a victim’s browser. Public evidence includes PoC payloads and explo...
Crosslinked - LinkedIn Enumeration Tool To Extract Valid Employee Names From An Organization Through Search Engine Scraping
CrossLinked simplifies the processes of searching LinkedIn to collect valid employee names when performing password spraying or another security testing against an organization. Using similar search engine scraping capabilities found in tools like subscraper and pymeta, CrossLinked will find vali...
OSIF - Open Source Information Facebook
OSIF is an accurate facebook account information gathering, all sensitive information can be easily gathered even though the target converts all of its privacy to only me, Sensitive information about residence, date of birth, occupation, phone number and email address. Installation $ pkg update...
Sandbox Restrictions Bypass
Artifex Ghostscript is vulnerable to sandbox restrictions bypass attacks. This allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup...
EulerOS Virtualization for ARM 64 3.0.1.0 : setup (EulerOS-SA-2019-1409)
According to the version of the setup package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to...
Intel® SCS Discovery Utility and Intel® ACU Wizard Advisory
Summary: A potential security vulnerability in Intel® Setup and Configuration Software Intel® SCS Discovery Utility and Intel® AMT Configuration Utility Wizard Intel® ACU Wizard may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities...
Important: Red Hat Security Advisory: rhvm-setup-plugins security and bug fix update
An update for rhvm-setup-plugins is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Shr3dKit
This is an offensive tool for Red Team operations. The tool kit, named Shr3dKit, is a collection of scripts and tools for various stages of a Red Team engagement, including reconnaissance, weaponization, delivery, command and control, lateral movement, establishing a foothold, escalating...
DoorGets Sensitive Information Disclosure Vulnerability
DoorGets is a free and open source content management system. A sensitive information disclosure vulnerability exists in /setup/temp/admin.php and /setup/temp/database.php in doorGets 7.0. A remote, unauthenticated attacker can exploit this vulnerability to obtain the administrator password...
May 3, 2019—KB4495667 (OS Build 17763.475)
None None...
Fedora 30 : 1:gnome-bluetooth / at-spi2-core / atomix / bijiben / containers / etc (2019-ac2a21ff07)
This update fixes a bug in the Meson build system which caused binaries and libraries to incorrectly be marking as requiring an executable stack. This makes them more vulnerable to security issues, and also can result in errors caused by SELinux denials. This update also provides rebuilds of all...
CVE-2019-11616
doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php. A remote unauthenticated attacker could exploit this vulnerability to obtain the administrator password...
CVE-2019-11616
doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php. A remote unauthenticated attacker could exploit this vulnerability to obtain the administrator password...
CVE-2019-11616
CVE-2019-11616 affects doorGets 7.0. The vulnerability is a sensitive information disclosure in /setup/temp/admin.php and /setup/temp/database.php, allowing a remote unauthenticated attacker to obtain the administrator password. Affected software: doorGets 7.0 (web CMS). Root cause and vector det...