PYSEC-2019-168

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. The vulnerability exists as bearer tokens are revealed in the system logs...

OSXCollector - A Forensic Evidence Collection & Analysis Toolkit For OS X

OSXCollector is a forensic evidence collection & analysis toolkit for OSX. Forensic Collection The collection script runs on a potentially infected machine and outputs a JSON file that describes the target machine. OSXCollector gathers information from plists, SQLite databases and the local file...

Buffer overflow

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /var/www/video folder. It seems that this binary dumps the HTTP VERB in the system logs. As a part of doing that it retrieves the HTTP VERB sent by the user and uses a vulnerable...

MakerBot Industries Replicator 5G printer information leakage vulnerability

The MakerBot Industries Replicator 5G printer is a fifth-generation 3D printer from the American company MakerBot Industries. An information disclosure vulnerability exists in the MakerBot Industries Replicator 5G printer, which runs the Apache HTTP server. The vulnerability can be exploited to...

pacemaker: Information disclosure through use-after-free

A use-after-free flaw was found in pacemaker which could result in certain sensitive information to be leaked via the system logs...

pacemaker: Information disclosure through use-after-free

A use-after-free flaw was found in pacemaker which could result in certain sensitive information to be leaked via the system logs...

The vulnerability of the mydlink web interface of D-Link routers allows a hacker to obtain DNS query logs and user login logs.

The vulnerability of the D-Link microprogrammed router’s web interface function “mydlink” is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain DNS query logs and user login logs by sending specially crafted...

CVE-2019-3885

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs...

DEBIAN-CVE-2019-3885

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs...

CVE-2019-3885

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs...

CVE-2019-3885

CVE-2019-3885 is a use-after-free vulnerability in pacemaker up to and including version 2.0.1 that could cause sensitive information to be leaked via system logs. Connected Nessus/Gentoo/OS advisory entries confirm this flaw alongside other pacemaker issues (e.g., CVEs 2018-16877, 2018-16878, 20...

CVE-2019-3885

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs...

CVE-2019-3885

A use-after-free flaw was found in pacemaker which could result in certain sensitive information to be leaked via the system logs...

CVE-2019-3885

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs...

PT-2019-16754 · Red Hat +4 · Pacemaker +5

Name of the Vulnerable Software and Affected Versions: pacemaker versions up to and including 2.0.1 Description: A use-after-free flaw was found in pacemaker, which could result in certain sensitive information to be leaked via the system logs. Recommendations: For versions up to and including...

UBUNTU-CVE-2019-3885

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs...

Cross-Site Scripting (XSS)

contao/core-bundle is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the system logs, which would be executed in the context of the user's browser when the user loads the logs...

CVE-2018-14995

The ZTE Blade Vantage Android device with a build fingerprint of ZTE/Z839/sweet:7.1.1/NMF26V/20180120.095344:user/release-keys, the ZTE Blade Spark Android device with a build fingerprint of ZTE/Z971/peony:7.1.1/NMF26V/20171129.143111:user/release-keys, the ZTE ZMAX Pro Android device with a buil...

AutoRDPwn v4.5 - The Shadow Attack Framework

AutoRDPwn is a script created in Powershell and designed to automate the Shadow attack on Microsoft Windows computers. This vulnerability allows a remote attacker to view his victim's desktop without his consent, and even control it on request. For its correct operation, it is necessary to comply...