Aggregator

CVE-2013-1662 | VMware Workstation/Player on Debian Linux Mount /usr/bin/vmware-mount access control (VMSA-2013-0010 / EDB-27938)

Vuldb Updates
4 months 2 weeks ago
A vulnerability, which was classified as problematic, was found in VMware Workstation and Player on Debian Linux. This affects an unknown part of the file /usr/bin/vmware-mount of the component Mount Handler. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2013-1662. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2000-0336 | OpenLDAP 1.2.7/1.2.8/1.2.9/1.2.10 /usr/tmp/ symlink (EDB-19946 / Nessus ID 61801)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in OpenLDAP 1.2.7/1.2.8/1.2.9/1.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /usr/tmp/. The manipulation leads to symlink following. The identification of this vulnerability is CVE-2000-0336. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2012-6272 | Dell OpenManage Server Administrator 7.1.0.1 topic cross site scripting (VU#950172 / EDB-38179)

Vuldb Updates
4 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in Dell OpenManage Server Administrator 7.1.0.1. This issue affects some unknown processing. The manipulation of the argument topic leads to cross site scripting. The identification of this vulnerability is CVE-2012-6272. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2018-12617 | qemu-ga 2.12.50 QMP Command qga/commands-posix.c qmp_guest_file_read integer overflow (USN-3826-1 / EDB-44925)

Vuldb Updates
4 months 2 weeks ago
A vulnerability classified as critical has been found in qemu-ga 2.12.50. Affected is the function qmp_guest_file_read of the file qga/commands-posix.c of the component QMP Command Handler. The manipulation leads to integer overflow. This vulnerability is traded as CVE-2018-12617. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Weekly Update 428

Troy Hunt
4 months 3 weeks ago

I wouldn't say this is a list of my favourite breaches from this year as that's a bit of a disingenuous term, but oh boy were there some memorable ones. So many of the incidents I deal with are relatively benign in terms of either the

Troy Hunt

CVE-2014-7186 | GNU Bash up to 3.2.48 redir_stack memory corruption (USN-2364-1 / EDB-34860)

Vuldb Updates
4 months 3 weeks ago
A vulnerability classified as critical has been found in GNU Bash. This affects the function redir_stack. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2014-7186. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. Due to its background and reception, this vulnerability has an historic impact. It is recommended to upgrade the affected component.
vuldb.com

Ransomware Developer Mikhail Matveev Arrested in Russia

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
4 months 3 weeks ago

Russian authorities have arrested Mikhail Matveev, a notorious Russian hacker linked to multiple ransomware attacks worldwide. Matveev, who was also known by online aliases such as Wazawaka, Uhodiransomwar, m1x, and Boriselcin, was detained in Kaliningrad, Russia, following an investigation into his alleged cybercrimes. According to a RIA Novosti source, the Kaliningrad Interior Ministry and the […]

The post Ransomware Developer Mikhail Matveev Arrested in Russia appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Gurubaran

CVE-2024-52946 | LemonLDAP::NG up to 2.20.0 Session Refresh improper authentication (Issue 3255 / Nessus ID 211976)

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in LemonLDAP::NG up to 2.20.0 and classified as critical. This issue affects some unknown processing of the component Session Refresh. The manipulation leads to improper authentication. The identification of this vulnerability is CVE-2024-52946. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2007-5979 | F5 Firepass 4100 up to 5.4.6 download_plugin.php3 backurl cross site scripting (EDB-30755 / XFDB-38439)

Vuldb Updates
4 months 3 weeks ago
A vulnerability has been found in F5 Firepass 4100 up to 5.4.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file download_plugin.php3. The manipulation of the argument backurl leads to cross site scripting. This vulnerability is known as CVE-2007-5979. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

Managed ad