DEBIAN-CVE-2019-2182

In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android Kernel MMU Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. The Kernel MMU is one of the kernel memory unit management components. An elevation of privilege vulnerability exists in the Kernel MMU component of Android. An attacker can exploit thi...

UBUNTU-CVE-2019-15919

An issue was discovered in the Linux kernel before 5.0.10. SMB2write in fs/cifs/smb2pdu.c has a use-after-free...

Alkacon OpenCMS 10.5.x - Cross-Site Scripting (2)

Exploit Title: Alkacon OpenCMS 10.5.x - Multiple XSS in Alkacon OpenCms Site Management Google Dork: N/A Date: 18/07/2019 Exploit Author: Aetsu Vendor Homepage: http://www.opencms.org Software Link: https://github.com/alkacon/opencms-core Version: 10.5.x Tested on: 10.5.5 / 10.5.4 CVE :...

The Next Chapter in Our Story: VMware + Carbon Black

I am excited to share with you a significant milestone in Carbon Black’s history. Earlier today, Carbon Black entered into a merger with VMware, who as of moments ago announced its intention to acquire Carbon Black. You can also read the press release with more details here, but first I’d like to...

Linux kernel buffer overflow vulnerability (CNVD-2019-29637)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the 'parseaudiomixerunit' function in the sound/usb/mixer.c file in Linux kernel 5.2.9 and earlier. The vulnerability stems...

CVE-2019-15117

parseaudiomixerunit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access...

Security Bulletin: Aspera Shares application is affected by multiple NGINX Vulnerabilities (CVE-2019-12206, CVE-2019-12207, CVE-2019-12208, CVE-2019-13617, CVE-2018-16845, CVE-2018-16843, CVE-2019-7401)

Summary IBM Aspera Shares has addressed the following NGINX vulnerabilities. Vulnerability Details CVEID: CVE-2019-7401 DESCRIPTION: NGINX Unit is vulnerable to a denial of service, caused by a heap-based buffer overflow in the router process. By sending a specially-crafted request, a remote...

Saia Burgess Controls PCD2.M4160 Processor Unit

Binary data 764887.prm...

Saia Burgess Controls PCD2.M4560 Processor Unit

Binary data 764888.prm...

Saia Burgess Controls PCD3.M3160 Processor Unit

Binary data 764877.prm...

Saia Burgess Controls PCD2.M150 Processor Unit

Binary data 764886.prm...

Saia Burgess Controls PCD3.M3360 Processor Unit

Binary data 764878.prm...

Saia Burgess Controls PCD2.M5540 Processor Unit

Binary data 764885.prm...

Saia Burgess Controls PCD3.M5540 Processor Unit

Binary data 764884.prm...

Saia Burgess Controls PCD3.M5360 Processor Unit

Binary data 764881.prm...

Saia Burgess Controls PCD3.M3330 Processor Unit

Binary data 764875.prm...

Saia Burgess Controls PCD3.M6860 Processor Unit

Binary data 764883.prm...

Saia Burgess Controls Processor Unit

Binary data 764930.prm...

eQ-3 Homematic CCU2 and CCU3 Input Validation Error Vulnerability

The eQ-3 Homematic CCU3 and eQ-3 HomeMatic CCU2 are both central control units for a smart home system from eQ-3 Germany. An input validation error vulnerability exists in eQ-3 Homematic CCU2 and CCU3, which can be exploited by an unauthenticated attacker to achieve remote code execution...