PT-2019-19182 · Apple · Itunes

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A denial of service issue exists due to inadequate input validation, allowing attackers to cause a denial of service. Recommendations: At the moment, there is no information about a...

PT-2019-15957 · Atasm · Atasm

Name of the Vulnerable Software and Affected Versions: ATasm version 1.06 Description: The issue is a stack-based buffer overflow in the parse expr function, located in setparse.c, which can be triggered by a crafted .m65 file. Recommendations: For ATasm version 1.06, as a temporary workaround,...

PT-2019-13856 · Red Hat · 3Scale

Name of the Vulnerable Software and Affected Versions: 3scale versions prior to 2.6 Description: A vulnerability was found that did not set the HTTPOnly attribute on the user session cookie, allowing an attacker to conduct cross-site scripting attacks and gain access to unauthorized information...

SpotAuditor 5.3.2 Local Buffer Overflow

Exploit Title: SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow SEH Exploit Author: Kirill Nikolaev Date: 2019-12-06 Vulnerable Software: SpotAuditor Vendor Homepage: http://www.nsauditor.com/ Version: 5.3.2 Software Link: http://spotauditor.nsauditor.com/downloads/spotauditorsetup.exe Tested...

GHSA-FPFF-384J-VXQ7 Data leakage via SQL Injection in Pimcore

pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection. An attacker with limited privileges classes permission can achieve a SQL injection that can lead in data leakage. The vulnerability can be exploited via 'id', 'storeId', 'pageSize' and 'tables' parameters, using a payload for trigger a...

Privilege Escalation

cordova-plugin-inappbrowser is vulnerable to privilege escalation. The vulnerability exists on android where arbitrary javascript can be run in the main application's website through the value of gap-iab://...

Arbitrary Code Injection

dot is vulnerable to arbitrary code injection. The template function does not sanitize input set on Object.prototype, allowing an attacker who is able to compile templates to inject and execute arbitrary code...

SMPlayer 19.5.0 Denial Of Service

Title : SMPlayer 19.5.0 - Denial of Service PoC Tested on : Windows 7 64 bit Vulnerable Software: SMPlayer v 19.5.0 Exploit Author: Malav Vyas Vendor Homepage: https://smplayer.info Version : 19.5.0 Software Link : https://smplayer.info/en/downloads POC run this python file, which will generate...

SMPlayer 19.5.0 - Denial of Service (PoC)

SMPlayer 19.5.0 - Denial of Service PoC Title : SMPlayer 19.5.0 - Denial of Service PoC Tested on : Windows 7 64 bit Vulnerable Software: SMPlayer v 19.5.0 Exploit Author: Malav Vyas Vendor Homepage: https://smplayer.info Version : 19.5.0 Software Link : https://smplayer.info/en/downloads POC run...

Denial Of Service (DoS)

github.com/cloudfoundry/gorouter is vulnerable to denial of service. The vulnerability exists due to an improper validation of the nonce input, allowing a remote attacker to crash the application by sending a malicious route service request with an invalid nonce...

Cross-Site Scripting (XSS)

angular is vulnerable to cross-site scripting XSS. There is no $sce protection against linkhref, which would allow a remote attacker to inject arbitrary Javascript into a victim's browser via RESOURCEURL...

IBM Cloud Orchestrator CVE-2019-4396 CRLF Injection Vulnerability

Description IBM Cloud Orchestrator is prone to a CRLF-injection vulnerability. An attacker can exploit this issue to add arbitrary headers to a webpage. This may aid in further attacks. The following versions are vulnerable: IBM Cloud Orchestrator 2.5, 2.5.0.1, 2.5.0.2, 2.5.0.3, 2.5.0.4, 2.5.0.5,...

Server-Side Request Forgery (SSRF)

unoconv is vulnerable to server-side request forgery SSRF. The vulnerability exists because it does not validate the user supplied input pathnames, allowing a remote attacker to have full or partial control of the request to be executed in the context of the server process worker...

Cross-Site Scripting (XSS)

node-red-dashboard is vulnerable to cross-site scripting XSS. The vulnerability exists as the uinotification node accepts raw HTML code by default...

Information Disclosure

github.com/kubernetes/kube-state-metrics is vulnerable to information disclosure. The vulnerability exists as it is possible to cause the entire content of Secrets to show up in the metrics label through kubectl and kube-state-metrics...

Denial Of Service (Dos)

mysql is vulnerable to denial of service. An easy to exploit vulnerability allows a high privileged attacker to crash the server...

Excessive memory usage in HTTP/2 with zero length headers

Excessive memory usage in HTTP/2 with zero length headers Severity: low CVE-2019-9516 Not vulnerable: 1.17.3+, 1.16.1+ Vulnerable: 1.9.5-1.17.2...

PT-2019-3131 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the web-based management interface, which could allow a remote attacker to conduct a...

CVE-2016-10767

CVE-2016-10767 affects cPanel before 60.0.25, allowing stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159). The vulnerability stems from improper input validation of client data, enabling stored script execution. Remediation: upgrade to cPanel 60.0.25 or later (apply the security...

aero.champ:cargojson (=1.0), ai.active:webhook-sdk (>=1.0.0 <=1.0.4) +30542 more potentially affected by CVE-2019-12814 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0 <=2.9.9)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =1.0.0, =4.4.0.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =0.1.2, =0.1.7 - ai.genauth:genauth-java-sdk =3.1.11 - ai.grakn.kgms:client =1.4.3 and more Source cves: CVE-2019-12814 Sour...