5791 matches found
Microsoft Windows Device Guard CVE-2018-0958 Local Security Bypass Vulnerability
Description Microsoft Windows is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...
Trend Micro Smart Protection Server BWListMgmt SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Smart Protection Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of parameters provided to wcs\bwlists\handler.php. The...
Huawei E5771h-937 Denial of Service Vulnerability
The Huawei E5771h-937 is a portable wireless router from Huawei China. A denial of service vulnerability exists in Huawei E5771h-937 E5771h-937TCPU-V200R001B328D62SP00C1133 prior and E5771h-937TCPU-V200R001B329D05SP00C1308 prior. An attacker can exploit this vulnerability to cause a denial of...
CVE-2017-17318: Improper Input Validation
Huawei MBB Mobile Broadband products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before E5771h-937TCPU-V200R001B329D05SP00C1308 have a Denial of Service DoS vulnerability. When an attacker accessing device sends special http request to device, the...
PT-2018-6493
Name of the Vulnerable Software and Affected Versions: Huawei MBB Mobile Broadband products E5771h-937 versions before E5771h-937TCPU-V200R001B328D62SP00C1133 Huawei MBB Mobile Broadband products E5771h-937 versions before E5771h-937TCPU-V200R001B329D05SP00C1308 Description: The issue allows an...
Security Advisory - DoS Vulnerability in Some Huawei MBB Products
Some Huawei MBB Mobile Broadband products have a Denial of Service DoS vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a Do...
Adobe Flash - Info Leak in Image Inflation
Adobe Flash - Info Leak in Image Inflation The attached image causes an info leak in image inflation. It occasionally crashes when rendered, otherwise it displays uninitialized memory as pixels. To reproduce, put the attached images on a webserver and vist: http://127.0.0.1?img=inflate.png. Proof...
Adobe Flash - Info Leak in Image Inflation Exploit
Exploit for multiple platform in category dos / poc The attached image causes an info leak in image inflation. It occasionally crashes when rendered, otherwise it displays uninitialized memory as pixels. To reproduce, put the attached images on a webserver and vist:...
Adobe Flash - Info Leak in Image Inflation
The attached image causes an info leak in image inflation. It occasionally crashes when rendered, otherwise it displays uninitialized memory as pixels. To reproduce, put the attached images on a webserver and vist: http://127.0.0.1?img=inflate.png. Proof of Concept:...
Energetic Bear/Crouching Yeti: attacks on servers
Energetic Bear/Crouching Yeti is a widely known APT group active since at least 2010. The group tends to attack different companies with a strong focus on the energy and industrial sectors. Companies attacked by Energetic Bear/Crouching Yeti are geographically distributed worldwide with a more...
CVE-2014-10073
The createresponse function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver directory...
DEBIAN-CVE-2014-10073
The createresponse function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver directory...
UBUNTU-CVE-2014-10073
The createresponse function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver directory...
CVE-2014-10073
The createresponse function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver directory...
ownCloud XSS and CSRF Protection Bypass Vulnerabilities (Mar 2018) - Linux
ownCloud is prone to XSS and CSRF vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...
ceph: Unauthenticated malformed HTTP requests handled by rgw_civetweb.cc:RGW::init_env() can lead to denial of service
A NULL pointer dereference flaw was found in RADOS Gateway HTTP request handling when using the Civetweb native webserver. An unauthenticated attacker could crash RADOS Gateway server by sending malicious HTTP requests...
[20180502] - Core - Add PHAR files to the upload blacklist
Depending on the server configuration, PHAR files might be handled as executable PHP scripts by the webserver...
Prisma Industriale Checkweigher PrismaWEB 1.21 - Hard-Coded Credentials
Prisma Industriale Checkweigher PrismaWEB 1.21 Authentication Bypass Vendor: Prisma Industriale S.r.l. Product web page: https://www.prismaindustriale.com Affected version: 1.0 Rev 21, EPROM 202FWSAM ?? Summary: Web Administration of Machine. Desc: The vulnerability exists due to the disclosure o...
Solaris 10 (x86) : 138536-01
Service Provisioning System 6.0: N1 SPS Webserver 7 Plug-in Patch. Date this patch was last updated by Sun : Jul/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: OS command injection, arbitrary file upload & SQL injection product: ClipBucket vulnerable version: 4.0.0 - Release 4902 fixed version: 4.0.0 - Release 4902 CVE number: -...