PT-2020-20108

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad systems affected versions not specified Description The issue concerns the SPI Protected Range Registers PRx in Lenovo ThinkPad systems. After resuming from S3 sleep mode, the PRx is not set in various BIOS versions. However, t...

CVE-2020-13128: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java the servlet for handling file upload accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service...

Mail.ru: Time-Based SQL injection at city-mobil.ru

Bind time-based SQL injection in https://city-mobil.ru/ due to unsafe usage of GET parameter JSON SLEEP PROFIT! P.S. Detail summary coming soon.... possibly... watch at https://blog.deteact.com...

DeathRansom - A Ransomware Developed In Python, With Bypass Technics, For Educational Purposes

What is a ransomware? A ransomware is malware that encrypts all your files and shows a ransom request, which tells you to pay a set amount, usually in bitcoins BTC, in a set time to decrypt your files, or he will delete your files. How it works? First, the script checks if it's in a sandbox,...

xHCI driver crashes after you resume computer from sleep mode in Windows 8.1 or Windows Server 2012 R2

xHCI driver crashes after you resume computer from sleep mode in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs when you resume a computer from sleep mode in Windows 8.1 or Windows Server 2012 R2. You can resolve this issue by using the update or hotfix in this...

STOP Error 0x0000009F in DRIVER_POWER_STATE_FAILURE on Windows 8.1 when your computer resumes from sleep mode

STOP Error 0x0000009F in DRIVERPOWERSTATEFAILURE on Windows 8.1 when your computer resumes from sleep mode Symptoms Symptom 1 On a computer that's running Windows 8.1, you may receive a Stop error 0x0000009F in DRIVERPOWERSTATEFAILURE error message when your computer resumes from sleep mode...

March 17, 2020—KB4541333 (OS Build 17134.1399)

None None...

MTN Group: Remote OS Command Execution on Oracle Weblogic server via [CVE-2017-10271]

Summary Hello. I was able to identify RCE vulnerability due to the outdated Oracle Weblogic instance on https://raebilling.mtn.co.za. Steps To Reproduce To reproduce, launch this request with BurpSuite This request to the https://raebilling.mtn.co.za/wls-wsat/CoordinatorPortType will trigger slee...

The vulnerability of the __sleep and __wakeup functions in the Symfony software development and management platform allows attackers to compromise data integrity.

The vulnerability of the sleep and wakeup functions in the Symfony software platform for web application development and management involves the restoration of unreliable information in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity...

Citrix Receiver Error: "Check network connections" When iPad Goes into Sleep Mode

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After unlocking the iPad the Citrix Receiver Shows the following message: Connection not possible...

CVE-2019-6190

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep S3 on systems with Intel TXT enabled...

phpMyChat Plus 1.98 SQL Injection

Title: phpMyChat Plus 1.98 - 'pmcusername' SQL Injection Date: 2020-02-13 Exploit Author: J3rryBl4nks Vendor Homepage: http://ciprianmp.com/latest/ Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChatPlus/ Version MyChat Plus 1.98 Tested on Windows 10/Kali Rolling The phpMyCh...

CVE-2019-6190: Improper Initialization

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep S3 on systems with Intel TXT enabled...

CVE-2019-8548

An issue existed where partially entered passcodes may not clear when the device went to sleep. This issue was addressed by clearing the passcode when a locked device sleeps. This issue is fixed in watchOS 5.2. A partially entered passcode may not clear when the device goes to sleep...

CVE-2019-8548

An issue existed where partially entered passcodes may not clear when the device went to sleep. This issue was addressed by clearing the passcode when a locked device sleeps. This issue is fixed in watchOS 5.2. A partially entered passcode may not clear when the device goes to sleep...

CVE-2019-8548

An issue existed where partially entered passcodes may not clear when the device went to sleep. This issue was addressed by clearing the passcode when a locked device sleeps. This issue is fixed in watchOS 5.2. A partially entered passcode may not clear when the device goes to sleep...

PT-2019-19084

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 5.2 Description An issue existed where partially entered passcodes may not clear when the device went to sleep. This issue was addressed by clearing the passcode when a locked device sleeps. Recommendations For versio...

Telerik UI - Remote Code Execution via Insecure Deserialization Exploit

Exploit for asp platform in category web applications Telerik UI - Remote Code Execution via Insecure Deserialization Exploit See the full write-up at Bishop Fox, CVE-2019-18935: https://know.bishopfox.com/research/cve-2019-18935-remote-code-execution-in-telerik-ui, for a complete walkthrough of...

Apache Olingo Input Validation Error Vulnerability

Apache Olingo is a U.S. Apache Apache Software Foundation for the implementation of Open Data Protocol OData, Open Data Protocol Java library. An input validation error vulnerability in Apache Olingo versions 4.0.0 through 4.6.0 stems from a failure to perform any checks on the Retry-After header...

PT-2019-20319

Уязвимость утилиты powerdevil операционной системы Astra Linux связана с ошибками при обработке нажатия кнопки питания после выхода монитора из состояния сна и дальнейшим неправильным позиционированием элементов интерфейса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...