PT-2018-11202

Name of the Vulnerable Software and Affected Versions SUSE Linux SMT versions prior to 3.0.37 Description A SQL Injection issue in the RegistrationSharing module of SUSE Linux SMT enables remote attackers to execute arbitrary SQL statements. Recommendations For versions prior to 3.0.37, update to...

PT-2018-19229

Name of the Vulnerable Software and Affected Versions yast2-smt affected versions not specified Description This issue concerns a security update requirement for SMT, ensuring all users install the update, even those who only install security updates. The update addresses several issues, includin...

SUSE-SU-2018:2426-1 Security update for kernel-livepatch-tools

This update for kernel-livepatch-tools fixes the following issues: Add script for disabling SMT to help with the mitigation of the 'L1 Terminal Fault' issue CVE-2018-3646 bsc1099306 The script is called 'klp-kvm-l1tf-ctrl-smt' and is used for enabling or disabling SMT to mitigate the issue when...

SUSE-SU-2018:2394-1 Security update for kgraft

This update for kgraft fixes the following issues: Add script for disabling SMT to help with the mitigation of the 'L1 Terminal Fault' issue CVE-2018-3646 bsc1099306 The script is called 'klp-kvm-l1tf-ctrl-smt' and is used for enabling or disabling SMT to mitigate the issue when this administrati...

CVE-2018-10769

Summary (CVE-2018-10769): The SmartMesh (SMT) smart contract’s transferProxy and approveProxy functions are vulnerable to replay attacks, allowing unauthorized transfers of digital assets. The issue arises because the same-named functions (with identical signatures) exist in other tokens (First, ...

PT-2018-10094

Name of the Vulnerable Software and Affected Versions SmartMesh SMT affected versions not specified First FST affected versions not specified GG Token GG affected versions not specified M2C Mesh Network MTC affected versions not specified M2C Mesh Network mesh affected versions not specified UG...

smt-online.co.il XSS vulnerability

Open Bug Bounty ID: OBB-645532 Description| Value ---|--- Affected Website:| smt-online.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OpenBSD Disables Intel Hyper-Threading to Prevent Spectre-Class Attacks

Security-oriented BSD operating system OpenBSD has decided to disable support for Intel's hyper-threading performance-boosting feature, citing security concerns over Spectre-style timing attacks. Introduced in 2002, Hyper-threading is Intel's implementation of Simultaneous Multi-Threading SMT tha...

Integer overflow

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...

CVE-2018-10376

The SmartMesh (SMT) Ethereum ERC20 token is vulnerable to an integer overflow within the transferProxy (or proxyTransfer) function. Attackers can exploit this by providing specially crafted _fee and _value parameters; if the sum of these parameters overflows to zero, it can bypass sanity checks, ...

kernel security and bug fix update

3.10.0-693.11.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-693.11.1 - powerpc perf: Fix book3s kernel to userspace backtraces Gustavo...

Multiplatform Open Source Binary Analysis: BARF Project

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual...

smtmagnetics.com XSS vulnerability

Vulnerable URL: http://www.smtmagnetics.com/products/series.php?cate=Capacitors=Film%20Capacitors=NPX%3C/title%3E%3Csvg/onload=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...

Using symbolic execution to solve a tiny ASCII maze.

In this post we'll exercise the symbolic execution engine KLEE over a funny ASCII Maze yet another toy example! | VS. | Maze dimensions: 11x7 Player pos: 1x1 Iteration no. 0 Program the player moves with a sequence of 'w', 's', 'a' or 'd' Try to reach the prize! +-+---+---+ |X| || | | --+ | | | |...

Format string

Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in a Long Running Web Process LRWP request, which triggers incorrect...

CVE-2008-6519

Xitami Web Server vulnerability CVE-2008-6519 affects Xitami 2.2a–2.5c2 (and possibly other versions). It is a format-string issue in Long Running Web Process (LRWP) requests that triggers incorrect logging code in the SMT kernel via the sendfmt function, allowing remote denial of service (daemon...

CVE-2008-6519: Use of Externally-Controlled Format String

Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in a Long Running Web Process LRWP request, which triggers incorrect...

CVE-2008-6520: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in a URI that ends in 1 .ssi, 2 .shtm, or 3 .shtml,...

AIX 6.1 TL 1 : X11.base.smt (U813441)

The remote host is missing AIX PTF U813441, which is related to the security of the package X11.base.smt. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U813441. The text itself is copyright C...

Mercury/32 Mail Server 3.32 < 4.51 - SMTP EIP Overwrite

/ Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP overwrite exploit Exploit date :...