UBUNTU-CVE-2019-16058

An issue was discovered in the pamp11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme...

CVE-2019-1977

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an endpoint device in certain circumstances. The...

Cisco Nexus 7000 Series Switches and Nexus 7700 Series Switches NX-OS Software Input Validation Error Vulnerability

Cisco Nexus 7000 Series Switches and Cisco Nexus 7700 Series Switches are both products of Cisco Corporation.Cisco Nexus 7000 Series Switches are a 7000 series switch.Cisco Nexus 7700 Series Switches are a 7700 series switch. Cisco Nexus 7000 Series Switches are a 7000 series switch. Cisco Nexus...

Cisco NX-OS Software Resource Management Error Vulnerability (CNVD-2019-32062)

Cisco Nexus 3000 Series Switches are Cisco products.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco Nexus 3500 Platform Switches is a 3500 series platform switch.Cisco MDS 9000 Series Multilayer Switches is a MDS 9000 series multilayer switch.Cisco NX-OS Software is a set of data...

Binance KYC Data Leak — Crypto Exchange Sets $290,000 Bounty On Blackmailer

Malta-based cryptocurrency exchange Binance has become a victim of a ransom demand from a scammer who claimed to have hacked the KYC Know Your Customer data of thousands of its customers. The unknown attacker threatened the world's largest cryptocurrency exchange by volume to release KYC...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29623)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 60.0.25 that stems from the program not enforcing feature list...

CVE-2018-13927

creationtimestamp| type| source ---|---|--- 2019-07-22 18:28:15+00:00| seen| https://t.me/cibsecurity/5635...

CVE-2019-1019

creationtimestamp| type| source ---|---|--- 2019-07-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47115 2024-02-26 16:38:09+00:00| published-proof-of-concept| https://t.me/YouPentest/5565 2024-10-10 02:52:34+00:00| published-proof-of-concept|...

Magecart Hackers Infect 17,000 Sites Through Misconfigured Amazon S3 Buckets

Magecart strikes again! Cybersecurity researchers have identified yet another supply-chain attack carried out by payment card hackers against more than 17,000 web domains, which also include websites in the top 2,000 of Alexa rankings. Since Magecart is neither a single group nor a specific malwa...

The vulnerability of the JPC_NOMINALGAIN function in the JasPer library allows a hacker to trigger a service failure.

The vulnerability of the JPCNOMINALGAIN function in the JasPer library set is related to errors in processing JPEG-2000 images. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially crafted image...

DDoS Attacker Who Ruined Gamers' Christmas Gets 27 Months in Prison

A 23-year-old hacker from Utah who launched a series of DDoS attacks against multiple online services, websites, and online gaming companies between December 2013 and January 2014 has been sentenced to 27 months in prison. Austin Thompson, a.k.a. "DerpTroll," pledged guilty back in November 2018...

Linear eMerge 50P/5000P File Upload Vulnerability

The Linear eMerge 50P/5000P is an access control security system managed through a browser from Nortek Security & Control. A file upload vulnerability exists in the Linear eMerge 50P/5000P. An attacker could use this vulnerability to upload a file with an arbitrary extension to a directory in the...

Nortek Security & Control Linear eMerge 50P/5000P Cross-Site Request Forgery Vulnerability

Nortek Security & Control Linear eMerge 50P/5000P is a browser-based access control system from Nortek Security & Control, USA. A cross-site request forgery vulnerability exists in the Nortek Security & Control Linear eMerge 50P/5000P, which arises from a WEB application that does not adequately...

CVE-2019-7270

Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery CSRF...

CVE-2019-8352

creationtimestamp| type| source ---|---|--- 2019-05-20 19:46:14+00:00| seen| https://t.me/cvemitreorg/98 2019-06-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46969...

CVE-2019-5946

creationtimestamp| type| source ---|---|--- 2019-05-17 16:51:32+00:00| seen| https://t.me/cvemitreorg/41...

'GozNym' Banking Malware Gang Dismantled by International Law Enforcement

In a joint effort by several law enforcement agencies from 6 different countries, officials have dismantled a major global organized cybercrime network behind GozNym banking malware. GozNym banking malware is responsible for stealing nearly $100 million from over 41,000 victims across the globe,...

Exploit for Use After Free in Microsoft

CVE-2019-0708 Introduction Microsoft has released its mont...

The vulnerability of the network operating system NX-OS for Cisco Nexus 9000 series routers, related to deficiencies in access control, allows a hacker to execute arbitrary operating system commands on behalf of the root user.

The vulnerability of the Cisco Nexus 9000 series network operating system routers is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary operating system commands on behalf of the root user by accessing the CLI of the vulnerable device...

The vulnerability of the system layer of the networking operating system NX-OS for Cisco Nexus Series 9000 routers allows a hacker to overwrite system files.

The vulnerability of the system layer of the networking operating system NX-OS for Cisco Nexus 9000 series routers exists due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a attacker to overwrite system files...