azureml-designer-recommender-modules (=0.0.1), monk-cuda100 (=0.0.1) +9 more potentially affected by CVE-2020-5215 via tensorflow-gpu (=2.0.0)

tensorflow-gpu PYPI version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - azureml-designer-recommender-modules =0.0.1 - monk-cuda100 =0.0.1 - monk-cuda100-test =0.0.1 - monk-cuda101 =0.0.1 -...

CVE-2019-6470

CVE-2019-6470 concerns a use-after-free/crash in DHCPv6 when ISC BIND libraries are mismatched with dhcpd. The described root cause is a bug in a BIND library function used by dhcpd, with the library bug preventing normal operation and a crash potential when vendors differ in package versions. Af...

Redis is not authorized to access high-risk vulnerability alerts-a vulnerability alert-the black bar safety net

Recently, Sangfor security team found that open-source databases Redis broke up an unauthorized access vulnerability, the first time for tracking and analysis of early warning. The study found that the use of the vulnerability, the attacker can achieve rally shell for arbitrary code execution...

@gkatsev/grunt-harp (>=0.18.0 <=0.19.0), @mobify/documentation-theme (>=1.11.3 <=2.0.0-preview.2-dev) +20 more potentially affected by CVE-2019-5437 via harp (>=0.11.2 <=0.32.0)

harp NPM version =0.11.2, =0.18.0, =1.11.3, =1.11.3, =0.0.3, =0.0.8, =0.0.1, =0.0.1, =0.0.1-1, =0.0.1, =0.1.0, =0.1.0, =0.2.9 - n-p-m =1.1.0 and more Source cves: CVE-2019-5437 Source advisory: OSV:GHSA-46HV-7769-J7RX...

CVE-2019-0708: Windows RDP service worms level vulnerability alerts-a vulnerability alert-the black bar safety net

2019 5 May 14, Microsoft officially released security patches, repair the Windows Remote Desktop service remote code execution vulnerability, the vulnerability affects some older versions of Windows system. This vulnerability is pre-authentication and without user interaction, this means that thi...

Apache HTTP Server components to mention the right vulnerability alerts-a vulnerability alert-the black bar safety net

Recently, the Aapche HTTP Server official release of the Aapche HTTP Server 2.4.39 version update, this version fixes a bug number for CVE-2019-0211 mention the right vulnerability, the vulnerability rating of high risk, according to Sangfor security team, the vulnerabilities impact severity, the...

WordPress 5.1 CSRF lead to remote command execution vulnerability alerts-a vulnerability alert-the black bar safety net

Report number: B6-2019-031301 Report source: 360-CERT The authors of the report: a 360-CERT Update date: 2019-03-13 0x00 vulnerability background 2019 03 May 13, 360 CERT monitoring to RIPSTECH released WordPress 5.1 CSRF vulnerability leads to remote code execution the contents of the details...

Unsafe Dependency Resolution

Overview com.paypal.tools:Gibberish-Detector is a small program to detect gibberish using a Markov Chain. Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to resolving dependencies over an insecure channel http. If the build occurred over an insecure connection...

WordPress Plugin Tagregator 0.6 - Cross-Site Scripting

Exploit Title: WordPress Plugin Tagregator 0.6 - Cross-Site Scripting Date: 2018-05-05 Exploit Author: ManhNho Vendor Homepage: https://wordpress.org/plugins/tagregator/ Software Link: https://downloads.wordpress.org/plugin/tagregator.0.6.zip Ref: https://pastebin.com/ZGr5tyP2 Version: 0.6 Tested...

Security Bulletin: Vulnerability in Apache Commons affects Watson Explorer and Watson Content Analytics (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by Watson Explorer and Watson Content Analytics. Vulnerability Details CVEID: CVE-2015-7450 DESCRIPTION: Apache Commons Collections could allow a remote attacker to execute arbitrary code on...

CVE-2017-9422

CVE-2017-8920 (CGI:IRC) affects irc.cgi before 0.5.12; it reflects user-supplied input from the R parameter without proper output encoding, enabling XSS. This CVE-8920 detail is the active vulnerability; CVE-2017-9422 is a reservation duplicate and not used. Remedy: upgrade CGI:IRC to 0.5.12 or l...

Oracle VM VirtualBox Local Vulnerability

Oracle VM VirtualBox is a cross-platform virtual machine software from Oracle. The software supports running multiple operating systems, creating VM groups, sharing folders, etc. on the same computer. A local security vulnerability exists in Oracle VM VirtualBox versions prior to 5.0.32 and...

adition.com XSS vulnerability

Open Bug Bounty ID: OBB-197732 Description| Value ---|--- Affected Website:| adition.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Lepton 2.2.2 Stable CSRF / Open Redirect / Password Handling Vulnerabilities

Lepton version 2.2.2 Stable suffers from password handling, insecure bruteforce protection, cross site request forgery, and open redirection vulnerabilities. 1. Introduction Affected Product: LEPTON 2.2.2 stable Fixed in: 2.3.0 Fixed Version http://www.lepton-cms.org/posts/ Link:...

Threat Outbreak Alert RuleID24029: Email Messages Distributing Malicious Software on July 29, 2016

Medium Alert ID: 48331 First Published: 2016 July 29 19:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24029 may contain the following files: Name | Siz...

lasvegasnevada.gov XSS vulnerability

Vulnerable URL: http://www.lasvegasnevada.gov/cs/idcplg?IdcService=GETSEARCHRESULTS=StandardResults=20=%2Fcs%2Fidcplg%3FIdcService%3DGETDYNAMICPAGE%26PageName%3Dindex=dInDate=Desc==Public=%28dInDate+%3E%3D+%60%3C%24dateCurrent%28-7%29%24%3E%60%29=%22%3E%3Csvg/onload=confirm%28%27XSSPOSED%27%29%3E...

Mosca - Static Analysis Tool To Find Bugs

Just another Simple static analysis tool to find bugs like a grep unix command, at mosca have a modules, that was call egg, each egg is a simple config to find bug at especific language like PHP,Ruby,ASP etc... Example of egg config at directory "egg", If Mosca read a line with vunerability of eg...

Threat Outbreak Alert RuleID19663: Email Messages Distributing Malicious Software on November 25, 2015

Medium Alert ID: 42283 First Published: 2015 November 25 19:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19663 may contain the following files: Name |...

HFS 2.3 x Remote command execution vulnerability alerts-a vulnerability alert-the black bar safety net

The search method 0x1 ZoomEye search http://www.zoomeye.org/search?q=HFS+2.3 0x2 google Hack intext:server information with finished version Catch the chicken hackers don't hit I want to hit a certain author-you!...

Fedora Update for krb5-appl FEDORA-2011-17493

Check for the Version of krb5-appl OpenVAS Vulnerability Test Fedora Update for krb5-appl FEDORA-2011-17493 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...