CVE-2020-15001

An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP configurations. The access code is not checked whe...

Code injection

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP...

HPSBHF03647 rev. 2 - HP Open-Chassis Pre-boot Direct Memory Access (DMA) Vulnerability

Potential Security Impact Arbitrary Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT. Reported by: Mickey Shkatov from Eclypsium, and Zoltan Harmath from Microsoft. VULNERABILITY SUMMARY A potential security vulnerability with pre-boot...

Security update for teeworlds (moderate)

openSUSE Security Update: Security update for teeworlds Announcement ID: openSUSE-SU-2019:1999-1 Rating: moderate References: 1112910 1131729 Cross-References: CVE-2018-18541 CVE-2019-10877 CVE-2019-10878 CVE-2019-10879 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes four...

Rockwell Automation ArmorPoint Chassis 39 Slot 1738 Chassis 39

Binary data 753680.prm...

Rockwell Automation PointIO Chassis 29 Slot 1734 Chassis 29

Binary data 753590.prm...

Denial Of Service (DoS)

kernel is vulnerable to denial of service.The vulnerability exits in the kvmsetmemoryregion function in virt/kvm/kvmmain.c, allowing malicious user to cause an application crash by leveraging certain device access to trigger movement of memory slots...

Mail Fishing

Not email, paper mail: Thieves, often at night, use string to lower glue-covered rodent traps or bottles coated with an adhesive down the chute of a sidewalk mailbox. This bait attaches to the envelopes inside, and the fish in this case -- mail containing gift cards, money orders or checks, which...

Microsoft Edge Chakra - NewScObjectNoCtor or InitProto Type Confusion Exploit

NewScObjectNoCtor and InitProto opcodes are treated as having no side effects, but actually they can have via the SetIsPrototype method of the type handler that can cause transition to a new type. This can lead to type confusion in the JITed code. In the PoC, it overwrites the pointer to property...

Microsoft Edge Chakra - NewScObjectNoCtor or InitProto Type Confusion

Microsoft Edge Chakra - NewScObjectNoCtor or InitProto Type Confusion NewScObjectNoCtor and InitProto opcodes are treated as having no side effects, but actually they can have via the SetIsPrototype method of the type handler that can cause transition to a new type. This can lead to type confusio...

Microsoft Edge Chakra JIT NewScObjectNoCtor / InitProto Type Confusion

Microsoft Edge: Chakra: JIT: Type confusion via NewScObjectNoCtor or InitProto CVE-2019-0567 NewScObjectNoCtor and InitProto opcodes are treated as having no side effects, but actually they can have via the SetIsPrototype method of the type handler that can cause transition to a new type. This ca...

CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

PT-2018-10673 · Amazon · Alexa +1

Name of the Vulnerable Software and Affected Versions: Amazon Echo devices affected versions not specified Description: The reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill, allowing an attacker to obtain transcripts of speech not intended for Alexa to process. Thi...

The vulnerability of the clusterLoadConfig function in the Redis database management system allows a attacker to cause service interruptions or other adverse effects.

The vulnerability of the clusterLoadConfig function in the Redis database management system arises from an operation that occurs outside the buffer in memory, due to the lack of checks on the values of migratingslotsto and migratingslotsfrom, which are defined in the configuration file. Exploitin...

Casino Сlub: Lucky Slots - Possible privilege escalation, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Casino Сlub: Lucky Slots published at the 'play' market has multiple vulnerabilities...

betuk.com XSS vulnerability

Vulnerable URL: https://www.betuk.com/games/casino/slots/fortunes-of-sparta?brandId=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Slotomania - Free Slots Casino - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slotomania - Free Slots Casino published at the 'play' market has multiple vulnerabilities...

Dragon Era - RPG Card Slots - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dragon Era - RPG Card Slots published at the 'play' market has multiple vulnerabilities...

LIL WAYNE SLOTS: Slot Machines - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LIL WAYNE SLOTS: Slot Machines published at the 'play' market has multiple vulnerabilities...