Wifi-soft's Unibox Controllers Remote Command Injection Vulnerability (CNVD-2019-00771)

Wifi-soft's Unibox Controllers are fast-paced network controllers for all large and small venues. A remote code injection vulnerability exists in Wifi-soft's Unibox Controllers. An attacker can exploit the vulnerability to inject arbitrary code...

PT-2019-11103

Name of the Vulnerable Software and Affected Versions: Zelio Soft 2 versions prior to 5.1 Description: A Use After Free issue exists which could cause remote code execution when opening a specially crafted Zelio Soft project file. This issue is related to the parsing of Zelio Soft 2 ZM2 files...

Wifi-soft's Unibox Controllers Remote Code Injection Vulnerability

Wifi-soft's Unibox Controllers are fast-paced network controllers for all large and small venues. A remote code injection vulnerability exists in Wifi-soft's Unibox Controllers. An attacker can exploit the vulnerability to inject arbitrary code...

Schneider Electric Zelio Soft 2

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Schneider Electric Equipment: Zelio Soft 2 Vulnerability: Use After Free 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for remote code execution when opening a specially crafted project...

CVE-2018-3262

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Stylesheet. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3192

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Query. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

ISACA Moscow Vulnerability Management Meetup 2018

Last Thursday, September 20th, I spoke at ISACA Moscow "Vulnerability Management" Meetup held at Polytechnic University. The only event in Moscow devoted solely to Vulnerability Management. So I just had to take part in it. The target audience of the event - people who implement the vulnerability...

Kernel update: Virtuozzo ReadyKernel patch 61.0 for Virtuozzo 7.0.8 and 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo 7.0.8 and 7.0.8 HF1. Vulnerability id: PSBM-87836 It was discovered that a container with NFS mounts could keep the files /var/lib/nfs/rpcpipefs/nfs/clntX open, even if no NFS server was...

soft-net.at XSS vulnerability

Open Bug Bounty ID: OBB-623565 Description| Value ---|--- Affected Website:| soft-net.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Important: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

soft-yadro.ru XSS vulnerability

Open Bug Bounty ID: OBB-613191 Description| Value ---|--- Affected Website:| soft-yadro.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cryptomining Campaign Returns Coal and Not Diamond

Executive summary Soon after a launch of a new cryptocurrency, Bitvote, in January, Talos discovered a new mining campaign affecting systems in India, Indonesia, Vietnam and several other countries that were tied to Bitvote. Apart from the fact that the attackers have chosen to target the new...

QingDao Nature Easy Soft Chanzhi Enterprise Portal System Arbitrary File Read Vulnerability

QingDao Nature Easy Soft Chanzhi Enterprise Portal System a.k.a. chanzhieps is an enterprise portal system for corporate marketing use. The system has built-in features such as articles, products, forums, comments and members. A security vulnerability exists in QingDao Nature Easy Soft Chanzhi...

CVE-2018-10122

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

CVE-2018-10122: Improper Limitation of a Pathname to a Restricted Directory

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

PT-2018-9694

Name of the Vulnerable Software and Affected Versions: QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps version pro1.6 Description: The issue allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to "www/file.php" API...

softforfree.com XSS vulnerability

Open Bug Bounty ID: OBB-573839 Description| Value ---|--- Affected Website:| softforfree.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Google Android Media framework (libstagefright_soft_avcenc) information disclosure vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Media framework libstagefrightsoftavcenc is one of the soft decoding libraries. An information disclosure vulnerability exis...

JVN#83834277: Multiple vulnerabilities in FS010W

FS010W provided by FUJI SOFT INCORPORATED is a WiFi router. FS010W contains multiple vulnerabilities listed below. Stored cross-site scripting CWE-79 - CVE-2018-0519 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.3 CVSS v2|...

opti-soft.ru XSS vulnerability

Open Bug Bounty ID: OBB-563495 Description| Value ---|--- Affected Website:| opti-soft.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...