New Wallarm Dashboard

There is an update in the Wallarm Console, which presents a brand new dashboard that can’t be missed. There are three significant changes that are worth mentioning: New structure. The dashboard has a new, clear structure emphasizing multiple modules of the Wallarm Platform — WAF, Scanner, FAST. T...

The vulnerability of the microprogramming software used in Zyxel Ethernet switches such as ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 lies in the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the microprogramming software used in Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 lies in the lack of protective measures for the website...

The vulnerability of the McAfee Advanced Threat Defense software lies in the lack of protection for the SQL query structure, allowing attackers to execute arbitrary commands.

The vulnerability of the McAfee Advanced Threat Defense security tool is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the S Pip content management system lies in the lack of measures taken to protect the website structure, allowing attackers to compromise the integrity of the data.

The vulnerability of the Scribunto content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

CVE-2019-2288

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2019-19577

An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamically adapt the number ...

Design/Logic Flaw

An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamically adapt the number ...

CVE-2019-19577

An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamically adapt the number ...

CVE-2019-19577

CVE-2019-19577 describes a race in Xen when running on AMD CPUs with an IOMMU. The code path dynamically adapts pagetables height for the IOMMU to guest address space size and updates the height without proper locking, allowing a malicious HVM guest administrator to trigger data-structure access ...

CVE-2019-19339

It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure...

The vulnerability of Google Chrome browser, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially created HTML page...

Ngrev - Tool For Reverse Engineering Of Angular Applications

Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run your...

ATFuzzer - Dynamic Analysis Of AT Interface For Android Smartphones

"Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" is accepted to the 35th Annual Computer Security Applications Conference ACSAC 2019. https://relentless-warrior.github.io/wp-content/uploads/2019/11/atfuzz.pdf Abstract This paper focuses on checkin...

The vulnerability in the J-Web web interface of the Junos OS operating system allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability in the J-Web web interface of the Junos OS operating system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Spectrum Power software-based web server allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Spectrum Power software-based web server relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

Amazon Linux AMI : kernel (ALAS-2019-1322)

A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries. A privileged guest user may use this flaw to induce a hardware Machine Check Error on the host processor,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.1.24 machine-os-content-container security update

Red Hat OpenShift Container Platform release 4.1.24 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...

The vulnerability of the microprogramming software of Cisco SPA100 Series IP phones, which stems from the lack of protective measures for website structures, allows attackers to execute arbitrary code or gain access to confidential information.

The vulnerability of Cisco SPA100 Series IP phones’ microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain access to confidential information through a specially...

The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis involves memory restoration of an unreliable data structure. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the web interface for managing Cisco Small Business microprogramming software allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability of the web interface for managing Cisco Small Business microprogramming software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain access to confidential...