3862 matches found
bangkok.immigration.go.th Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-928873 Security Researcher KhanJanny Helped patch 3055 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting bangkok.immigration.go.th...
Stored XSS Vulnerability in legacy IBM System x IMM - Lenovo Support US
No description provided...
Stored XSS Vulnerability in legacy IBM System x IMM - US
Lenovo Security Advisory: LEN-24785 Potential Impact: Code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6159 Summary Description: A stored cross-site scripting XSS vulnerability exists in the legacy IBM System x IMM IMM v1 embedded Baseboard Management...
PaperDisplay Hotkey Vulnerability - US
Lenovo Security Advisory: LEN-27569 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6165 Summary Description: A DLL search path vulnerability was reported in PaperDisplay Hotkey Service versions 1.2.0.8 and earlier that could allow...
Linux/x86 - ASLR Disable Polymorphic Shellcode (107 bytes)
---------------------- DESCRIPTION ------------------------------------- ; Title: Linux x86 ASLR deactivation for Linux/x86 - Polymorphic ; Author: Daniel Ortiz ; Tested on: Linux 4.18.0-25-generic 26 Ubuntu ; Size: 107 bytes ; SLAE ID: PA-9844 ---------------------- ASM CODE...
CVE-2019-1010066
Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in orde...
CVE-2019-1010066
Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in orde...
Design/Logic Flaw
Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in orde...
Category Specific RSS feed Subscription <= 2.0 - Cross-Site Request Forgery (CSRF)
The Category Specific RSS feed Subscription WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...
WordPress Category Specific RSS feed Subscription plugin <= 2.0 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Gota Abe Cryptography Laboratory in WordPress Category Specific RSS feed Subscription plugin versions = 2.0. Solution Update the WordPress Category Specific RSS feed Subscription plugin to the latest available version at least 2.1...
Iomega and LenovoEMC NAS Vulnerability - Lenovo Support US
No description provided...
Windows Malicious Software Removal Tool x64 - July 2019 (KB890830)
After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...
Linux-Smart-Enumeration - Linux Enumeration Tool For Pentesting And CTFs With Verbosity Levels
First, a couple of useful oneliners ; wget "https://raw.githubusercontent.com/diego-treitos/linux-smart-enumeration/master/lse.sh" -O lse.sh curl "https://raw.githubusercontent.com/diego-treitos/linux-smart-enumeration/master/lse.sh" -o lse.sh linux-smart-enumeration Linux enumeration tools for...
The vulnerability of the Akord-Win64 information protection tool, related to access control deficiencies, allows a intruder to gain access to confidential data.
The vulnerability of the information protection tool against unauthorized access, Akord-Win64, is related to deficiencies in access control for files when a specific file path is explicitly specified. Exploiting this vulnerability could allow an intruder, operating locally, to gain access to...
CVE-2019-1855
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...
MongoDB Offers Field Level Encryption
MongoDB now has the ability to encrypt data by field: MongoDB calls the new feature Field Level Encryption. It works kind of like end-to-end encrypted messaging, which scrambles data as it moves across the internet, revealing it only to the sender and the recipient. In such a "client-side"...
Ubuntu: Security Advisory (USN-4033-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Lenovo Service Bridge Vulnerabilities - US
Lenovo Security Advisory: LEN-27725 Potential Impact: Remote code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6166,CVE-2019-6167,CVE-2019-6168, CVE-2019-6169 Summary Description: Vulnerabilities reported in Lenovo Service Bridge could allow remote code...
Lenovo Service Bridge Vulnerabilities - Lenovo Support US
No description provided...
Cisco SD-WAN Solution Privilege Permission and Access Control Issues Vulnerability (CNVD-2019-25711)
Cisco SD-WAN Solution is a suite of network extension solutions from Cisco. the CLI is a command line interface. A privilege-granting and access control issue vulnerability exists in the CLI in Cisco SD-WAN Solution versions 18.3.6, 18.4.1, and 19.1.0, which can be exploited by a local attacker t...