SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:1913-1)

This update for samba fixes the following issues : CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets bsc1173359...

SUSE-SU-2020:1913-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. - CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets bsc117335...

manchesterwineschool.com Cross Site Scripting vulnerability OBB-1219643

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

hamiltondiscountwine.com Cross Site Scripting vulnerability OBB-1208269

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

arlingtonwine.net Cross Site Scripting vulnerability OBB-1207624

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

harrisonclarkewine.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1174407 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

wine-and-spirits.co.il Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147709 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting wine-and-spirits.co.il...

Windows/x64 - WinExec Add-Admin Dynamic Null-Free Shellcode (210 Bytes)

210 bytes small WinExec add-admin dynamic null-free shellcode. // Shellcode Title: WinExec Add-Admin Dynamic Null-Free Shellcode 210 Bytes // Shellcode Author: Bobby Cooke // Date: March 21st, 2020 // Tested on: Windows 10 Home - 1909 x8664, Windows 10 Pro - 1909 x86 // Description: Windows...

lothianwineschool.com Cross Site Scripting vulnerability

Security Researcher CityBoy Helped patch 88 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting lothianwineschool.com website and its users. Following...

birminghamwineschool.com Cross Site Scripting vulnerability OBB-1068228

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

wine-searcher.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1034320 Security Researcher soon Helped patch 8 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting wine-searcher.com website and its users. Following coordinat...

200k Personal Records Exposed by Events Planning Firm

A database belonging to Australian event planning startup, Amazingco, was found leaking more than 200,000 records with personal details tied to children’s entertainment, wine tour events and more. Amazingco, which is based in Austrailia but offers services in New Zealand and the U.S., connects...

capitolwinecellar.com XSS vulnerability

Open Bug Bounty ID: OBB-707647 Description| Value ---|--- Affected Website:| capitolwinecellar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Parrot Security 4.3 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Parrot 4.3 is now available for download. This release provides security and stability updates and is the starting point for the plan to develop an LTS edition of Parrot. Linux 4.18 Linux was updated to the 4.18.10 version, and linux 4.19 will be released soon. Firefox 63 Firefox 63 provides...

valentin-wine.ch XSS vulnerability

Open Bug Bounty ID: OBB-667252 Description| Value ---|--- Affected Website:| valentin-wine.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cliftonwineschool.com XSS vulnerability

Open Bug Bounty ID: OBB-664459 Description| Value ---|--- Affected Website:| cliftonwineschool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

manchesterwineschool.com XSS vulnerability

Open Bug Bounty ID: OBB-638938 Description| Value ---|--- Affected Website:| manchesterwineschool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Wine Denial of Service Vulnerability (CNVD-2018-15741)

Wine is a suite of free software that allows running DOS and MS Windows programs Windows 3.x and Win32 executables on UNIX operating systems such as Linux. A denial of service vulnerability exists in the 'PlayEnhMetaFileRecord' function of the enhmetafile.c file in Wine version 3.7. An attacker c...

Wine Denial of Service Vulnerability

Wine is a suite of free software that allows running DOS and MS Windows programs Windows 3.x and Win32 executables on UNIX operating systems such as Linux. A denial of service vulnerability exists in the 'PlayEnhMetaFileRecord' function of the enhmetafile.c file in Wine version 3.7. An attacker c...

Heap overflow

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...