EulerOS 2.0 SP5 : patch (EulerOS-SA-2019-1801)

According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrar...

DejaBlue: New BlueKeep-Style Bugs Mean You Need to Update Windows Now

Vulnerabilities in Microsoft's Remote Desktop Protocol continue to plague the web...

NewStart CGSL CORE 5.04 / MAIN 5.04 : gnutls Multiple Vulnerabilities (NS-SA-2019-0068)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has gnutls packages installed that are affected by multiple vulnerabilities: - It was found that GnuTLS's implementation of HMAC- SHA-256 was vulnerable to Lucky Thirteen-style attack. A remote attacker could use this flaw to...

Sql injection

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...

CVE-2017-18387

Affected software: cPanel prior to 68.0.15. The vulnerability is an arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314). Root cause: Maketext injection allows code execution, enabling an attacker to run arbitrary code with high integrity/availability impact. Explo...

CVE-2017-18387

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload SEC-314...

Design/Logic Flaw

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

Design/Logic Flaw

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20877

CVE-2018-20877 affects cPanel prior to 74.0.8, where the WHM Style Upload interface is vulnerable to self-XSS. The underlying issue is rooted in client-side data handling that allows arbitrary script execution within the UI. Exploitation details are not provided in the supplied documents beyond t...

Announcing the Sixth Annual Flare-On Challenge

The FireEye Labs Advanced Reverse Engineering FLARE team is thrilled to announce that the popular Flare-On reverse engineering challenge will return for the sixth straight year. The contest will begin at 8:00 p.m. ET on Aug. 16, 2019. This is a CTF-style challenge for all active and aspiring...

CVE-2019-13638

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156...

AZL-6790 CVE-2019-13638 affecting package patch for versions less than 2.7.6-7

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156...

ALPINE-CVE-2019-13638

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156...

CVE-2019-13638

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156...

CVE-2019-13638

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156...

CVE-2019-13638

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156...

Arbitrary file deletion vulnerability of Co***.cl***.php file in the blue style background of NetShow's Chinese and English foreign trade websites

NetShow Chinese and English foreign trade website blue style is a website management system. There is an arbitrary file deletion vulnerability in the Co.cl.php file in the backend of the blue style of the Nethub Sino-British foreign trade website. An attacker can exploit this vulnerability to...

GHSA-9CCV-P7FG-M73X XML Injection in python-libnmap

Description python-libnmap is affected by a Billion-Laughs -style XML injection vulnerability. PoC python ty = NmapParser payload = """ &lol3; """ ty.parsepayload...