15680 matches found
Arbitrary Code Execution
The IcedTea-Web project provides a Java web browser plug-in and an implementation of Java Web Start, which is based on the Netx project. It also contains a configuration tool for managing deployment settings for the plug-in and Web Start implementations. It was discovered that the IcedTea-Web...
Denial Of Service (DoS)
The libexif packages provide an Exchangeable image file format Exif library. Exif allows metadata to be added to and read from certain types of image files. Multiple flaws were found in the way libexif processed Exif tags. An attacker could create a specially-crafted image file that, when opened ...
Denial Of Service (DoS)
The libexif packages provide an Exchangeable image file format Exif library. Exif allows metadata to be added to and read from certain types of image files. Multiple flaws were found in the way libexif processed Exif tags. An attacker could create a specially-crafted image file that, when opened ...
Denial Of Service (DoS) And Remote Code Execution (RCE)
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF images using the Pixar Log Format encoding. An attacker could create a specially-crafted TIFF file that,...
Flerken - Obfuscated Command Detection Tool
Command line obfuscation has been proved to be a non-negligible factor in fileless malware or malicious actors that are "living off the land". To bypass signature-based detection, dedicated obfuscation techniques are shown to be used by red-team penetrations and even APT activities. Meanwhile,...
Security Bulletin: Security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2019-0232)
Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about a security vulnerability affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-0232 DESCRIPTION: Apache Tomcat could...
LockerGoga Ransomware Family Used in Targeted Attacks
ARCHIVED STORY LockerGoga Ransomware Family Used in Targeted Attacks By ATR Operational Intelligence Team · April 29, 2019 Co-authored by Marc RiveroLopez. Initial discovery Once again, we have seen a significant new ransomware family in the news. LockerGoga, which adds new features to the tried...
libvpx/vpx_dec_fuzzer_vp8: Crash in subpixel_ssse3.asm:1165
Project: https://chromium.googlesource.com/webm/libvpx Detailed report: https://oss-fuzz.com/testcase?key=5145943336288256 Project: libvpx Fuzzer: libFuzzerlibvpxvpxdecfuzzervp8 Fuzz target binary: vpxdecfuzzervp8 Job Type: libfuzzerasanlibvpx Platform Id: linux Crash Type: UNKNOWN READ Crash...
Developers Versus Automation Engineers: How We Ended the Fighting with the Right CI Process
Hey developers and DevOps professionals: what if I told you that how you wrap and execute your automation tests could be the key to making your development process faster, more professional and stable, and stop the bickering between your developers and automation teams? This post will describe ho...
Lessons learned from the Microsoft SOC—Part 2: Organizing people
In the second post in our series, we focus on the most valuable resource in the security operations center SOC—our people. This series is designed to share our approach and experience with operations, so you can use what we learned to improve your SOC. In Part 1: Organization, we covered the SOC’...
The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...
The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...
The vulnerabilities of Azure DevOps Server and Team Foundation Server allow attackers to perform cross-site scripting attacks.
The vulnerability of Azure DevOps Server and Team Foundation Server lies in the lack of measures for input sanitization. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...
The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...
The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...
karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::QByteArray
Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5657295809150976 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
2 Plan Team 1.0.4 Cross Site Scripting
==================================================================================================================================== | Title : 2 Plan Team 1.0.4 - XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 65.032-bit | | Vendor :...
Joomla Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion Exploit
Exploit for php platform in category web applications Exploit Title: Joomla Core 1.5.0 through 3.9.4 - Directory Traversal && Authenticated Arbitrary File Deletion Exploit Author: Haboob Team Web Site: haboob.sa Email: email protected Software Link: https://www.joomla.org/ Versions: Joomla 1.5.0...
Joomla Core 1.5.0 - 3.9.4 - Directory Traversal Authenticated Arbitrary File Deletion
Joomla Core 1.5.0 - 3.9.4 - Directory Traversal Authenticated Arbitrary File Deletion Exploit Title: Joomla Core 1.5.0 through 3.9.4 - Directory Traversal && Authenticated Arbitrary File Deletion Date: 2019-March-13 Exploit Author: Haboob Team Web Site: haboob.sa Email: [email protected] Softwar...
Joomla 3.9.4 Arbitrary File Deletion / Directory Traversal
Exploit Title: Joomla Core 1.5.0 through 3.9.4 - Directory Traversal && Authenticated Arbitrary File Deletion Date: 2019-March-13 Exploit Author: Haboob Team Web Site: haboob.sa Email: [email protected] Software Link: https://www.joomla.org/ Versions: Joomla 1.5.0 through Joomla 3.9.4 CVE :...