15745 matches found
SimpleCrop - Critical - Unsupported - SA-CONTRIB-2018-030
Update: 2018-06-01 A new maintainer has stepped forward to maintain this module and has put out a new release. The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module...
AggressorScripts - Collection Of Aggressor Scripts For Cobalt Strike 3.0+ Pulled From Multiple Sources
Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources: AllInOne.cna v1 - Removed and outdated All purpose script to enhance the user's experience with cobaltstrike. Custom menu creation, Logging, Persistence, Enumeration, and 3rd party script integration. Version 2 i...
team-cag.com XSS vulnerability
Open Bug Bounty ID: OBB-618689 Description| Value ---|--- Affected Website:| team-cag.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
IBM Flashsystem File Disclosure
File disclosure vulnerability in IBM Flashsystem DownloadFile Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Drupal Avatar Uploader File Disclosure
File disclosure vulnerability in Drupal Avatar Uploader module Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
RedDawn Espionage Campaign Shows Mobile APTs on the Rise
A sophisticated and targeted mobile espionage campaign has been found targeting North Korean defectors. Mounted by a relatively new APT actor known as Sun Team, the offensive used Google Play and Facebook as attack vectors; and overall, it shows how quickly the mobile threat landscape is evolving...
skia/image_filter_deserialize_width: Use-of-uninitialized-value in SkBlurMaskFilterImpl::filterRRectToNine
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5735437942390784 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserializewidth Fuzz target binary: imagefilterdeserializewidth Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...
RHEL 6 : dhcp (RHSA-2018:1454)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1454 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...
dlplibs/cdrfuzzer: Use-of-uninitialized-value in libcdr::CDRParserState::_getRGBColor
Detailed report: https://oss-fuzz.com/testcase?key=5767834947813376 Project: dlplibs Fuzzer: libFuzzerdlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Critical: Red Hat Security Advisory: dhcp security update
An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Critical: Red Hat Security Advisory: dhcp security update
An update for dhcp is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Critical: Red Hat Security Advisory: dhcp security update
An update for dhcp is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Critical: Red Hat Security Advisory: dhcp security update
An update for dhcp is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...
Critical: Red Hat Security Advisory: dhcp security update
An update for dhcp is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
qpid-proton/fuzz-connection-driver: Crash in __msan_memmove.part.53
Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6266408911503360 Project: qpid-proton Fuzzer: libFuzzerqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: libfuzzermsanqpid-proton Platform Id: linux Crash Typ...
Samurai Email Discovery - Is A Email Discovery Framework That Grabs Emails Via Google Dork, Company Name, Or Domain Name
SED is a email discovery framework created 100% in BASH that grabs emails via google dork, company name, or domain name. Requirements apt-install lynx Screenshots Possibly more features such as an OSINT options, and credential reuse discovery & torsocks implimented - but it does the trick for now...
HackerOne: User object in GraphQL exposes number of trial reports for External Programs that also have a Private Program
Summary: For this vulnerability to work, it is necessary that you should be Admin/member of atleast one sandbox team and running a GraphQL node can tell you if the external programs exist on directory page running a private program on hackerone or not...
WordPress WP Support Plus Responsive Ticket System SQL Injection
SQL Injection vulnerability in WordPress WP Support Plus Responsive Ticket System plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Joomla Component com_saxumpicker SQL Injection
SQL Injection vulnerability in Joomla Component comsaxumpicker publicid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
team-battistelli-amelia.it XSS vulnerability
Open Bug Bounty ID: OBB-614793 Description| Value ---|--- Affected Website:| team-battistelli-amelia.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...