The vulnerability of the userprefs component in the software platform for collaborative development of SAP NetWeaver Development Infrastructure Cockpit allows a attacker to execute arbitrary code.

The vulnerability of the userprefs component /nwdicockpit/srv/data/ of the software development platform for SAP NetWeaver Development Infrastructure Cockpit is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute...

The Evolution of Darknets

This is interesting: To prevent the problems of customer binding, and losing business when darknet markets go down, merchants have begun to leave the specialized and centralized platforms and instead ventured to use widely accessible technology to build their own communications and operational...

The vulnerability in the implementation of the SCTP protocol kernel in the Linux operating system allows a hacker to trigger a memory leak.

The vulnerability in the implementation of the SCTP protocol kernel in the Linux operating system arises from a read operation that goes beyond the buffer boundaries in memory during the filling of the sockaddr data structure. Exploiting this vulnerability allows an attacker acting locally to...

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable...

The vulnerability of the SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the SharePoint Server software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable SharePoint server...

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted requests to the vulnerable...

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable...

Taking a page from the kernel's book: A TLB issue in mremap()

Posted by Jann Horn, Project Zero This is a technical blog post about TLB flushing bugs in kernels, intended for people interested in kernel security and memory management. Introduction: Bugs in Memory Management code There have been some pretty scary bugs in memory management in the past, like:...

Moderate: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

Denial Of Service (Dos)

bind is vulnerable to denial of service. An uninitialized data structure is used when DNSSEC validation was enabled, allowing a remote attacker to send a large number of queries to a DNSSEC validating BIND resolver to cause it to exit unexpectedly with an assertion failure...

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W network security gateway allows attackers to disclose protected information.

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose...

The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the website structure. This allows attackers to inject arbitrary code into the uploaded web pages or disclose protected information.

The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web page or disclose protected...

Integer overflow

A pointer overflow, with code execution, was discovered in ZeroMQ libzmq aka 0MQ 4.2.x and 4.3.x before 4.3.1. A v2decoder.cpp zmq::v2decodert::sizeready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can be leverag...

The vulnerability of the software controller for the centralized control of wireless networks by D-Link Central WiFi Manager arises from the lack of measures taken to protect the website structure. This allows a hacker to inject arbitrary code into the uploaded web page.

The vulnerability of the addUser function in the software controller for D-Link Central WiFi Manager exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the uploaded web page remotely...

Microsoft Windows JET Database Engine Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

PT-2019-1135 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue exists due to inadequate protection of the web page structure. An attacker could exploit this by sending a specially crafted request to the vulnerable SharePoi...

PT-2019-1136 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue exists due to inadequate protection of the web page structure. An attacker could exploit this by sending a specially crafted request to the vulnerable server,...