Stack overflow

An issue was discovered in Easy File Sharing EFS Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code...

CVE-2018-18912

CVE-2018-18912 affects Easy File Sharing (EFS) Web Server 7.2. The vulnerability is a stack-based buffer overflow triggered by a crafted POST request to forum.ghp when creating a new topic in the forums, allowing remote code execution. Public exploit details are present in third‑party description...

CVE-2018-18912

An issue was discovered in Easy File Sharing EFS Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code...

CVE-2018-15128

An issue was discovered in Polycom Group Series 6.1.6.1 and earlier, HDX 3.1.12 and earlier, and Pano 1.1.1 and earlier. A remote code execution vulnerability exists in the content sharing functionality because of a Buffer Overflow via crafted packets...

CVE-2017-12757

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...

Sql injection

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...

CVE-2017-12757

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...

Cross Origin Resource Sharing (CORS)

Firefox ESR and Firefox are vulnerable to cross origin resource sharingCORS bypass. A validation flaw in the Pocket toolbar allows a remote attacker to inject content and commands into the Pocket context enabling access to restricted resources...

Authentication Bypass

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

SUSE-SU-2018:3467-2 Security update for smt

SMT was updated to version 3.0.38. Following security issue was fixed: - CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup bsc1104076 Following non security issues were fixed: - Add migration path check when registration sharing is enabled - Fix sibling...

The SIM Swap Fix That the US Isn't Using

While foreign phone carriers are sharing data to stop SIM swap fraud, US carriers are dragging feet...

Google Chrome integer overflow vulnerability (CNVD-2019-23344)

Google Chrome is a web browser from Google, an American company. An integer overflow vulnerability exists in the Download Manager in versions prior to Google Chrome 74.0.3729.108. An attacker can exploit this vulnerability by tricking a user into visiting a specially crafted website to bypass the...

Android-Based Sony Smart-TVs Open to Image Pilfering

Two vulnerabilities in Android-based smart-TVs from Sony, including the flagship Bravia line, could allow attackers to access WiFi passwords and images stored on the devices. The bugs exist in the Photo Sharing Plus feature of Sony smart-TVs going back to 2015. They were uncovered by xen1thLabs i...

Ttyd - Share Your Terminal Over The Web

ttyd is a simple command-line tool for sharing terminal over the web, inspired by GoTTY. Features Built on top of Libwebsockets with C for speed Fully-featured terminal based on Xterm.js with CJK and IME support Graphical ZMODEM integration with lrzsz support SSL support based on OpenSSL Run any...

Trint Ltd: IDOR in changing shared file name

Summary: Hi Trind LTD, I have found a IDOR vulnerability in https://app.trint.com . An user can change shared file names through this IDOR. Steps To Reproduce: 1. Create a file from account B 2. Capture the request of renaming the file as shown in sample request 3. Create a file from account A an...

Sony Smart TV Information Disclosure / File Read Vulnerabilities

Exploit for hardware platform in category local exploits ADVISORY INFORMATION TITLE: Multiple vulnerabilities in Sony Smart TVs ADVISORY URL: https://www.darkmatter.ae/blogs/security-flaws-uncovered-in-sony-smart-tvs/ DATE PUBLISHED: 23/04/2019 AFFECTED VENDORS: Sony RELEASE MODE: Coordinated...

Information leakage vulnerability in FESCO's HR sharing service platform

Beijing Foreign Enterprise Human Resource Service Co., Ltd. is a company that provides human resource services to foreign representative offices in China, foreign financial institutions and economic organizations. An information leakage vulnerability exists in the FESCO human resources sharing...

[SECURITY] Fedora 29 Update: gnome-shell-extension-gsconnect-21-2.fc29

The KDE Connect project allows devices to securely share content such as notifications and files as well as interactive features such as SMS messagi ng and remote input. The KDE Connect team maintains cross-desktop, Android and Sailfish applications as well as an interface for KDE Plasma. GSConne...

CVE-2019-10886

An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version for the X7500D TV and other applicable TVs. This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is...

Improper access control

An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version for the X7500D TV and other applicable TVs. This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is...