211 matches found
Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities
Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilities due to remote attacker being able to execute arbitrary code , obtain sensitive informstion , and denial of service. Vulnerability Details CVEID: CVE-2020-4464 DESCRIPTION: IBM WebSphere...
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities
Summary IBM Security Privileged Identity Manager has addressed an issue for nss-softokn as follows. Vulnerability Details CVEID: CVE-2019-11745 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system,...
Fedora 31 : firefox (2020-449743fcc1)
VA-API under Wayland should work as expected now, added fix for mozbz1656436. ---- - Fixed VA-API video playback https://bugzilla.mozilla.org/showbug.cgi?id=1645671 ---- - New upstream update - 79.0 Note that Tenable Network Security has extracted the preceding description block directly from the...
richmond-va-free-classifieds.activeboard.com Cross Site Scripting vulnerability OBB-1244838
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
rentnowarlingtonva.com Cross Site Scripting vulnerability OBB-1237057
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
paris.onvasortir.com Cross Site Scripting vulnerability OBB-1228615
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-7816
A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by...
CVE-2020-8100 Incomplete validation in detection code in Bitdefender Engines (VA-8589)
Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while scanning a specially-crafted sample. This issue affects: Bitdefender Bitdefender Engines versions prior to 7.84063...
Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 10 (VA MN: 7.0.2-647, VA Agent: 7.0.2-367)
Hotfix 10 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37446 Unable to set "Advanced firewall mode with the default policy Drop" for containers. Vulnerability id: PVA-37477 VA Agent could consume 100% of one CPU. Vulnerability id: PVA-37479 VA Agent...
Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 9 (VA MN: 7.0.2-645, VA Agent: 7.0.2-364)
Hotfix 9 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-35779 Virtuozzo Automator warns about low disk space on SSDs with storage cache and journals. Vulnerability id: PVA-37393 VA agent can fully load MDS on nodes with lots of containers on Virtuozzo...
AirDrop 2.0 Denial Of Service
include include include include include include include include include include include // // Author: Marcelo VA!zquez aka s4vitar // AirDrop 2.0 Remote Denial of Service DoS // // Exploit Title: AirDrop 2.0 Remote Denial of Service DoS // Date: 2019-02-21 // Exploit Author: Marcelo VA!zquez aka...
ScreenStream 3.0.15 Denial Of Service
!/usr/bin/python coding: utf-8 Author: Marcelo VA!zquez aka s4vitar ScreenStream 3.0.15 Remote Denial of Service DoS Exploit Title: ScreenStream 3.0.15 Remote Denial of Service DoS Date: 2019-02-21 Exploit Author: Marcelo VA!zquez aka s4vitar Vendor Homepage: http://mobzapp.com/mirroring/index.ht...
AirMore 1.6.1 Denial Of Service
!/usr/bin/python coding: utf-8 Author: Marcelo VA!zquez aka s4vitar AirMore 1.6.1 Remote Denial of Service DoS & System Freeze Exploit Title: AirMore 1.6.1 Remote Denial of Service DoS & System Freeze Date: 2019-02-14 Exploit Author: Marcelo VA!zquez aka s4vitar Vendor Homepage:...
VA MAX 8.3.4 Remote Code Execution
root@nippur:/home/c/src/nippur cat vamax3.py !/usr/bin/env python quick poc for postauth rce bug in va max 8.3.4 more: https://code610.blogspot.com 10.02.2019 p.s. listening on any 4444 ... 192.168.1.126: inverse host lookup failed: Unknown host connect to 192.168.1.160 from UNKNOWN 192.168.1.126...
VA MAX 8.3.4 - (Authenticated) Remote Code Execution
VA MAX 8.3.4 - Authenticated Remote Code Execution root@nippur:/home/c/src/nippur cat vamax3.py !/usr/bin/env python quick poc for postauth rce bug in va max 8.3.4 more: https://code610.blogspot.com 10.02.2019 p.s. listening on any 4444 ... 192.168.1.126: inverse host lookup failed: Unknown host...
VA MAX 8.3.4 - Authenticated Remote Code Execution Exploit
Exploit for php platform in category web applications email protected:/home/c/src/nippur cat vamax3.py !/usr/bin/env python quick poc for postauth rce bug in va max 8.3.4 more: https://code610.blogspot.com 10.02.2019 p.s. listening on any 4444 ... 192.168.1.126: inverse host lookup failed: Unknow...
AirDroid 4.2.1.6 Denial Of Service
!/bin/bash Author: Marcelo VA!zquez aka s4vitar AirDroid Denial of Service DoS & System Crash Exploit Title: AirDroid Remote Denial of Service DoS & System Crash Date: 2019-02-07 Exploit Author: Marcelo VA!zquez Vendor Homepage: https://web.airdroid.com/ Software Link:...
VA MAX 8.3.4 - (Authenticated) Remote Code Execution
root@nippur:/home/c/src/nippur cat vamax3.py !/usr/bin/env python quick poc for postauth rce bug in va max 8.3.4 more: https://code610.blogspot.com 10.02.2019 p.s. listening on any 4444 ... 192.168.1.126: inverse host lookup failed: Unknown host connect to 192.168.1.160 from UNKNOWN 192.168.1.126...
Security Bulletin: IBM Security Identity Manager is affected by multiple vulnerabilities (CVE-2018-1959, CVE-2018-1962, CVE-2018-1970)
Summary IBM Security Identity Manager VA ISIM VA has addressed the following vulnerabilities due to hard-coded credentials, the lack of proper session termination, and XML external entity injection. Vulnerability Details CVEID: CVE-2018-1959 DESCRIPTION: IBM Security Identity Manager Virtual...
