4180 matches found
Windows Malicious Software Removal Tool - April 2019 (KB890830)
After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...
Microsoft Windows Device Guard CVE-2019-0732 Local Security Bypass Vulnerability
Description Microsoft Windows is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...
CVE-2019-10887
A reflected HTML injection vulnerability on Salicru SLC-20-cube35 devices running firmware version cs121-SNMP v4.54.82.130611 allows remote attackers to inject arbitrary HTML elements via a /DataLog.csv?log= or /AlarmLog.csv?log= or /waitlog.cgi?name= or /chart.shtml?data= or /createlog.cgi?name=...
In-Depth Analysis of JS Sniffers Uncovers New Families of Credit Card-Skimming Code
In a world that's growing increasingly digital, Magecart attacks have emerged as a key cybersecurity threat to e-commerce sites. Magecart, which is in the news a lot lately, is an umbrella term given to 12 different cyber criminal groups that are specialized in secretly implanting a special piece...
CVE-2019-7475
A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8...
CVE-2019-0224: Improper Neutralization of Input During Web Page Generation
In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser...
openSUSE Security Update : gitolite (openSUSE-2019-754)
This update for gitolite fixes the following issues : Gitolite was updated to 3.6.9 : - CVE-2018-16976: prevent racy access to repos in process of migration to gitolite boo1108272 - 'info' learns new '-p' option to show only physical repos as opposed to wild repos The update to 3.6.8 contains : -...
CVE-2017-2660
CVE-2017-2660 is rejected/not used; this CVE entry does not represent an active vulnerability.
Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-10294)
Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...
Advanced Host Monitor 11.92 beta - Local Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/env python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: Advanced Host Monitor 11.92 beta - Local Buffer Overflow EggHunter Date:...
The vulnerability of the programmable logic integrated circuit that controls the input buffer of Cisco Firepower 9000 Series software-based network interfaces allows a intruder to cause a service failure.
The vulnerability of the programmable logic integrated circuit that controls the input buffer of Cisco Firepower 9000 Series software lies in the handling of various types of input packets. Exploiting this vulnerability can allow an attacker to trigger a Denial-of-Service attack by sending a...
CVE-2019-3582 McAfee Endpoint Security updates fix a privilege escalation vulnerability
Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security ENS 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances...
GNU Binutils Buffer Overflow Vulnerability (CNVD-2019-05784)
GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...
PT-2019-6368
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to a heap-based buffer overflow in the process mips specific function of the readelf.c component in GNU Binutils. This can be exploited by a remote attacker using a specially crafted...
Design/Logic Flaw
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling Chrome is not exploitable...
CVE-2019-6453
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling Chrome is not exploitable...
CVE-2019-6453
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling Chrome is not exploitable...
CVE-2019-6453
mIRC before 7.55 is affected by CVE-2019-6453 due to argument injection via custom URI protocol handlers. An irc:// URI can load an arbitrary .ini file from a UNC share pathname, enabling remote command execution in the context of the application. Exploitation depends on browser-specific URI hand...
The vulnerability of the `load_specificdebug_section` function in the GNU Binutils development environment allows a hacker to trigger a service failure.
The vulnerability of the GNU Binutils development tool is related to a numerical overflow of the loadspecific DebugSection function in objdump.c, which results in the allocation of zero-sized memory. Exploiting this vulnerability can allow an attacker to cause a service failure...