Cross site request forgery (csrf)

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntpserver parameter in an ntpsync.cgi POST request...

CVE-2019-9122

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntpserver parameter in an ntpsync.cgi POST request...

RealTerm Serial Terminal 2.0.0.70 - Echo Port Buffer Overflow (SEH)

RealTerm Serial Terminal 2.0.0.70 - Echo Port Buffer Overflow SEH Exploit Title: RealTerm: Serial Terminal 2.0.0.70 - 'Echo Port' Buffer Overflow - SEH Date: 21.02.2019 Exploit Author: Matteo Malvica Vendor Homepage: https://realterm.sourceforge.io/ Software Link:...

RealTerm Serial Terminal 2.0.0.70 Echo Port Buffer Overflow

Exploit Title: RealTerm: Serial Terminal 2.0.0.70 - 'Echo Port' Buffer Overflow - SEH Date: 21.02.2019 Exploit Author: Matteo Malvica Vendor Homepage: https://realterm.sourceforge.io/ Software Link: https://sourceforge.net/projects/realterm/files/ Version: 2.0.0.70 Category: Local Contact:...

RealTerm Serial Terminal 2.0.0.70 - Echo Port Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: RealTerm: Serial Terminal 2.0.0.70 - 'Echo Port' Buffer Overflow - SEH Date: 21.02.2019 Exploit Author: Matteo Malvica Vendor Homepage: https://realterm.sourceforge.io/ Software Link:...

RealTerm Serial Terminal 2.0.0.70 - 'Echo Port' Buffer Overflow (SEH)

Exploit Title: RealTerm: Serial Terminal 2.0.0.70 - 'Echo Port' Buffer Overflow - SEH Date: 21.02.2019 Exploit Author: Matteo Malvica Vendor Homepage: https://realterm.sourceforge.io/ Software Link: https://sourceforge.net/projects/realterm/files/ Version: 2.0.0.70 Category: Local Contact:...

GHSA-735C-R4VC-6GM9 Downloads Resources over HTTP in bionode-sra

Affected versions of bionode-sra insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...

Downloads Resources over HTTP in bionode-sra

Affected versions of bionode-sra insecurely downloads resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. While the exact severity of impact for a vulnerability like this is highly variable and depends on the...

coba (>=1.0.8, <=1.0.9), frames-selenium (>=1.0.34, <=1.1.7) +6 more potentially affected by CVE-2016-10589 via selenium-binaries (>=0.1.6, <=0.13.11)

selenium-binaries NPM version =0.1.6, =1.0.8, =1.0.34, =1.0.0, =1.0.0, =0.8.0, =0.1.0, =0.13.0, =1.0.1 Source cves: CVE-2016-10589 Source advisory: OSV:GHSA-H4MC-R4F4-HCF4...

openSUSE Security Update : rmt-server (openSUSE-2019-185)

This update for rmt-server to version 1.1.1 fixes the following issues : The following issues have been fixed : - Fixed migration problems which caused some extensions / modules to be dropped bsc1118584, bsc1118579 - Fixed listing of mirrored products bsc1102193 - Include online migration paths...

Security update for rmt-server (moderate)

openSUSE Security Update: Security update for rmt-server Announcement ID: openSUSE-SU-2019:0185-1 Rating: moderate References: 1102046 1102193 1109307 1113760 1113969 1114831 1117106 1118579 1118584 Cross-References: CVE-2018-14404 CVE-2018-16468 CVE-2018-16470 Affected Products: openSUSE Leap 15...

Time not getting sync on XenServer with NTP

High NTP offset and jitter while delay is low. This can be seen with "ntpq -p". Offset is the time difference between the local server and remote Jitter is the difference between the last and current offset measurements, thus if it is high, it means that the offset is increasing more over time...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2019:0272-1)

This update for rmt-server to version 1.1.1 fixes the following issues : The following issues have been fixed : Fixed migration problems which caused some extensions / modules to be dropped bsc1118584, bsc1118579 Fixed listing of mirrored products bsc1102193 Include online migration paths into...

CloudMe Sync 1.11.2 Buffer Overflow - WoW64 (DEP Bypass)

CloudMe Sync 1.11.2 Buffer Overflow - WoW64 DEP Bypass Exploit Title: CloudMe Sync v1.11.2 Buffer Overflow - WoW64 - DEP Bypass Date: 24.01.2019 Exploit Author: Matteo Malvica Vendor Homepage:https://www.cloudme.com/en Software: https://www.cloudme.com/downloads/CloudMe1112.exe Category: Remote...

CloudMe Sync 1.11.2 Buffer Overflow - WoW64 - (DEP Bypass) Exploit

Exploit Title: CloudMe Sync v1.11.2 Buffer Overflow - WoW64 - DEP Bypass Exploit Author: Matteo Malvica Vendor Homepage:https://www.cloudme.com/en Software: https://www.cloudme.com/downloads/CloudMe1112.exe Category: Remote Contact:https://twitter.com/matteomalvica Version: CloudMe Sync 1.11.2...

CloudMe Sync 1.11.2 Buffer Overflow - WoW64 (DEP Bypass)

Exploit Title: CloudMe Sync v1.11.2 Buffer Overflow - WoW64 - DEP Bypass Date: 24.01.2019 Exploit Author: Matteo Malvica Vendor Homepage:https://www.cloudme.com/en Software: https://www.cloudme.com/downloads/CloudMe1112.exe Category: Remote Contact:https://twitter.com/matteomalvica Version: Cloud...

CloudMe Sync 1.11.2 Buffer Overflow

Exploit Title: CloudMe Sync v1.11.2 Buffer Overflow + Egghunt Date: 23.04.2018 Exploit Author:T3jv1l Vendor Homepage:https://www.cloudme.com/en Software: https://www.cloudme.com/downloads/CloudMe1112.exe Category:Local Contact:https://twitter.com/T3jv1l Version: CloudMe Sync 1.11.2 - Buffer...

CloudMe Sync 1.11.2 - Buffer Overflow + Egghunt

Exploit Title: CloudMe Sync v1.11.2 Buffer Overflow + Egghunt Date: 23.04.2018 Exploit Author:T3jv1l Vendor Homepage:https://www.cloudme.com/en Software: https://www.cloudme.com/downloads/CloudMe1112.exe Category:Local Contact:https://twitter.com/T3jv1l Version: CloudMe Sync 1.11.2 - Buffer...

CloudMe Sync 1.11.2 - Buffer Overflow + Egghunt Exploit

Exploit Title: CloudMe Sync v1.11.2 Buffer Overflow + Egghunt Exploit Author:T3jv1l Vendor Homepage:https://www.cloudme.com/en Software: https://www.cloudme.com/downloads/CloudMe1112.exe Category:Local Contact:https://twitter.com/T3jv1l Version: CloudMe Sync 1.11.2 - Buffer Overflow + Egghunt...

WEM agents are not syncing consistently with the WEM broker, only if they are rebooted or if the Norskale Agent Host Service is restarted

WEM agents are not syncing consistently with the WEM broker. Running command "AgentCacheUtility -refreshcache" does not return any errors, and refreshing the VUEMUIAgent either. WEM agents sync only when they are rebooted or if the Norskale Agent Host Service is restarted. The Last Connection...