Subscribe via feed.
Archive for November, 2019

ownCloud 10.3.0 Stable Cross Site Request Forgery

Posted by deepcore under exploit (No Respond)

Last Updated on November 2, 2019 by deepcore ownCloud version 10.3.0 Stable suffers from a cross site request forgery vulnerability.

Apache Solr 8.2.0 Remote Code Execution

Posted by deepcore under exploit (No Respond)

Last Updated on November 2, 2019 by deepcore Apache Solr version 8.2.0 suffers from a remote code execution vulnerability.

eIDAS-Node 2.3 Authentication Bypass

Posted by deepcore under exploit (No Respond)

Last Updated on November 2, 2019 by deepcore eIDAS-Node versions 2.3 and below suffer from an authentication bypass vulnerability.

Packet Storm New Exploits For October, 2019

Posted by deepcore under exploit (No Respond)

Last Updated on November 2, 2019 by deepcore This archive contains all of the 170 exploits added to Packet Storm in October, 2019.

Micro Focus (HPE) Data Protector SUID Privilege Escalation

Posted by deepcore under exploit (No Respond)

Last Updated on November 2, 2019 by deepcore This Metasploit module exploits the trusted $PATH environment variable of the SUID binary omniresolve in Micro Focus (HPE) Data Protector versions A.10.40 and below. The omniresolve executable calls the oracleasm binary using a relative path and the trusted environment $PATH, which allows an attacker to execute a […]

On Halloween Night, Google Discloses Chrome Zero-Day Exploited In The Wild

Posted by deepcore under exploit (No Respond)

Last Updated on November 2, 2019 by deepcore

Apple Security Advisory 2019-10-29-7

Posted by deepcore under Apple (No Respond)

Last Updated on November 2, 2019 by deepcore Apple Security Advisory 2019-10-29-7 – Safari 13 addresses code execution and cross site scripting vulnerabilities.

Tags: , ,

Apple Security Advisory 2019-10-29-1

Posted by deepcore under Apple (No Respond)

Last Updated on November 2, 2019 by deepcore Apple Security Advisory 2019-10-29-1 – iOS 13.2 and iPadOS 13.2 are now available and address code execution and cross site scripting vulnerabilities.

Tags: , ,

Apple Security Advisory 2019-10-29-5

Posted by deepcore under Apple (No Respond)

Last Updated on November 2, 2019 by deepcore Apple Security Advisory 2019-10-29-5 – Safari 13.0.3 is now available and addresses code execution and cross site scripting vulnerabilities.

Tags: , ,

Apple Security Advisory 2019-10-29-9

Posted by deepcore under Apple (No Respond)

Last Updated on November 2, 2019 by deepcore Apple Security Advisory 2019-10-29-9 – tvOS 13 addresses buffer overflow, code execution, cross site scripting, and denial of service vulnerabilities.

Tags: , ,