File Upload Vulnerability in IC Space Management System

IC Space Management System is a library IC space management system developed by Hangzhou Lianchuang Information Technology Co. IC Space Management System has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in IC Space Management System

The Information Commons is a specially designed one-stop service center and collaborative learning environment that has emerged in the context of the shared learning and open access movement. A file upload vulnerability exists in the IC Space management system, which can be exploited by an attack...

Windows Kernel - Out-of-Bounds Read in nt!MiParseImageLoadConfig While Parsing Malformed PE File

Windows Kernel - Out-of-Bounds Read in nt!MiParseImageLoadConfig While Parsing Malformed PE File We have encountered a Windows kernel crash in memcpy called by nt!MiParseImageLoadConfig while trying to load a malformed PE image into the process address space as a data file i.e...

Windows Kernel - NULL Pointer Dereference in nt!MiOffsetToProtos While Parsing Malformed PE File

We have encountered a Windows kernel crash in nt!MiOffsetToProtos while trying to load a malformed PE image into the process address space as a data file i.e. LoadLibraryExLOADLIBRARYASDATAFILE | LOADLIBRARYASIMAGERESOURCE. An example crash log generated after triggering the bug is shown below: -...

CVE-2019-10506

While processing QCANL80211VENDORSUBCMDAVOIDFREQUENCY vendor command, driver does not validate the data obtained from the user space which could be invalid and thus leads to an undesired behaviour in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdrago...

Denial Of Service (DoS)

Rubyzip is vulnerable to denial of service DoS attacks. The zip file entry extract method does not check or limit the file size at the time of extraction, allowing attackers to provide malicious ZIP file entries aka ZIP Bomb with spoofed uncompressed sizes to consume disk space at the time of...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2019-36642)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the files of Cisco IOS XE. The vulnerability stems from ineffective management of the underlying file system resources. An attacker cou...

CVE-2019-11277

Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny...

Amazon Linux AMI : kernel (ALAS-2019-1278)

A flaw was found in the Linux kernel in the hiddebugeventsread function in the drivers/hid/hid-debug.c file. A lack of the certain checks may allow a privileged user 'root' to achieve an out-of-bounds write and thus receiving user space buffer corruption.CVE-2018-9516 Note: The Release Date is...

EulerOS Virtualization for ARM 64 3.0.2.0 : php (EulerOS-SA-2019-1928)

According to the versions of the php packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PH...

Low: kernel

Issue Overview: A flaw was found in the Linux kernel in the hiddebugeventsread function in the drivers/hid/hid-debug.c file. A lack of the certain checks may allow a privileged user "root" to achieve an out-of-bounds write and thus receiving user space buffer corruption. CVE-2018-9516 Affected...

poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo...

A week in security (August 26 – September 1)

Last week on Malwarebytes Labs, we analysed the Android xHelper trojan, we wondered why the Nextdoor app would send out letters on behalf of their customers, reported about a study that explores the clickjacking problem across top Alexa-ranked websites, wondered how to get the board to invest in...

In-depth analysis of the thread and process handle leak vulnerability, under-vulnerability warning-the black bar safety net

PROCESSVM It covers the VM access permissions three types: WRITE/READ/OPERATION. The first two permissions should be self-explanatory, the third permission allows the operation of the virtual address space itself, such as modifying the page protection VirtualProtectEx or allocating memory with...

NASA astronaut accused of accessing ex-wife’s bank account from space

By Waqas The US space agency NASA National Aeronautics and Space Administration has confirmed that it is currently investigating an incident involving one of its astronauts who might have committed the first-ever cyber crime in outer space. This is a post from HackRead.com Read the original post:...

Product update: Virtuozzo Infrastructure Platform 2.5 Update 10 (2.5.0-1691)

This update provides fixes and improvements. Vulnerability id: VSTOR-22386, VSTOR-24775, VSTOR-25752 Upgrade Improvements in iSCSI targets migration during upgrade. Vulnerability id: VSTOR-25072 Upgrade Improved upgrade speed. Vulnerability id: VSTOR-25784 Upgrade Unable to download upgrade as a...

UBUNTU-CVE-2019-13486

In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of expansion in svcstatus.c...

UBUNTU-CVE-2019-13455

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c...

CVE-2019-4049

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of the underlying filesystem using the error logging service. IBM X-Force ID: 156398...

Denial of service

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of the underlying filesystem using the error logging service. IBM X-Force ID: 156398...