UBUNTU-CVE-2019-16738

In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...

TP-LINK TL-WR703N Router Has Denial of Service Vulnerability

The TP-LINK TL-WR703N is a mini wireless router from China's TP-Link. A denial of service vulnerability exists in the TP-LINK TL-WR703N router, where an attacker can cause a denial of HTTP service response by constructing a special data message to be sent to the router's WAN port IP address witho...

EulerOS 2.0 SP5 : foomatic (EulerOS-SA-2019-1964)

According to the versions of the foomatic packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that foomatic-rip failed to remove all shell special characters from inputs used to construct command lines for external...

CVE-2019-16393

SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character...

fileGPS - A Tool That Help You To Guess How Your Shell Was Renamed After The Server-Side Script Of The File Uploader Saved It

Introduction When you upload a shell on a web-server using a file upload functionality, usually the file get renamed in various ways in order to prevent direct access to the file, RCE and file overwrite. fileGPS is a tool that uses various techniques to find the new filename, after the server-sid...

RUSTSEC-2019-0020 fix unsound APIs that could lead to UB

Affected versions of this crate API could use uninitialized memory with some APIs in special cases, like use the API in none generator context. This could lead to UB. The flaw was corrected by This patch fixes all those issues above...

Denial of Service Vulnerability in Kunlun Tongstate MCGS Touch Panel TPC1062Ti System

MCGS is a set of Windows-based configuration software system developed by Beijing Kunlun Automation Software Technology Co., Ltd. which is used to quickly construct and generate the monitoring system of the upper computer, and it mainly accomplishes the acquisition and monitoring of on-site data ...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

Buffer Overflow Vulnerability in RealInfo, Zijin Bridge Monitoring and Configuration Software

RealInfo is an industrial automation monitoring and control configuration software developed by Daqing Zijinqiao Software Technology Company, which is funded by PetroChina. A buffer overflow vulnerability exists in RealInfo. An attacker can trigger the vulnerability via a special string, causing...

Exposed suppressed username via Special:Redirect

More info at https://phabricator.wikimedia.org/T230402...

Google Android Qualcomm HLOS Component Elevation of Privilege Vulnerability

Android is an open source operating system based on Linux. A security vulnerability exists in the Android Qualcomm HLOS component, which can be exploited by an attacker to submit special requests that can elevate privileges...

CVE-2019-14807

In the MobileFrontend extension 1.31 through 1.33 for MediaWiki, XSS exists within the edit summary field in includes/specials/MobileSpecialPageFeed.php...

Wind River Systems VxWorks Parameter Injection Vulnerability (CNVD-2019-25707)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from a network system or product that does not properly filter special characters in parameters...

Wind River Systems VxWorks Parameter Injection Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from a network system or product that does not properly filter special characters in parameters...

Robert Mueller's Work Is Done. Now It's Congress's Turn

In nearly six hours of testimony Wednesday, former special counsel Robert Mueller stuck to the facts...

Robert Mueller's Testimony: What Congress Needs to Know

Here’s what members of Congress should know before they question the former special counsel...

The vulnerability of the U.motion Builder system, related to the incorrect processing of special symbols in SQL queries, allows a hacker to execute arbitrary code.

The vulnerability of the U.motion Builder system for managing industrial and residential facilities is related to the improper processing of special symbols in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted query...