Hot News 2019 July

Databáze Hot News 2019 July - 2019 January February March April May June July August September October November December

31.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

Exploint

Oracle Hyperion Planning 11.1.2.3 - XML External Entity

Redis 4.x / 5.x - Unauthenticated Code Execution (Metasploit)

30.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

Exploint

iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects

iMessage - Memory Corruption when Decoding NSKnownKeysDictionary1

iMessage - NSArray Deserialization can Invoke Subclass that does not Retain References

macOS / iOS JavaScriptCore - JSValue Use-After-Free in ValueProfiles

macOS / iOS JavaScriptCore - Loop-Invariant Code Motion (LICM) Leaves Object Property Access Unguarded

Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming

29.7.2019

Bugtraq

Malware

Phishing

ApplelD	29th July 2019
Reminder: your information has been updated, login to complete the request(July 29, 2019, 3:28 am).

Vulnerebility

Exploint

WP Database Backup < 5.2 - Remote Code Execution (Metasploit)

Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass (Metasploit)

GigToDo 1.3 - Cross-Site Scripting

WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting

WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery

26.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

Jenkins Credentials Binding Plugin CVE-2019-1010241 Information Disclosure Vulnerability
2019-07-26
http://www.securityfocus.com/bid/109320

Qualcomm Components CVE-2019-2307 Integer Underflow Vulnerability
2019-07-26
http://www.securityfocus.com/bid/109383

LibreOffice Remote Code Execution and Unauthorized Access Vulnerabilities
2019-07-26
http://www.securityfocus.com/bid/109374

Exploint

Ahsay Backup 7.x - 8.1.1.50 - XML External Entity Injection

Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploit)

Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution

pdfresurrect 0.15 - Buffer Overflow

Moodle Filepicker 3.5.2 - Server Side Request Forgery

Microsoft Windows 7 build 7601 (x86) - Local Privilege Escalation

25.7.2019

Bugtraq

Malware

Phishing

Aol. Aol.	25th July 2019
2019 AOL OATH PRIVACY POLICY \| CUSTOMER SUPPORT 📧 AOL (AOL@COMMS.AOL.NET)

Vulnerebility

KDE KAuth CVE-2017-8422 Local Privilege Escalation Vulnerability
2019-07-25
http://www.securityfocus.com/bid/98412

FreeBSD CVE-2019-5604 Out of Bounds Read Denial of Service Vulnerability
2019-07-25
http://www.securityfocus.com/bid/109369

Exploint

WebKit - Universal Cross-Site Scripting due to Synchronous Page Loads

Ovidentia 8.4.3 - Cross-Site Scripting

Ovidentia 8.4.3 - SQL Injection

24.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

Exim CVE-2019-13917 Privilege Escalation Vulnerability
2019-07-24
http://www.securityfocus.com/bid/109338

Exploint

Android 7-9 - Remote Code Execution

Apple iMessage - DigitalTouch tap Message Processing Out-of-Bounds Read

Trend Micro Deep Discovery Inspector IDS - Security Bypass

WordPress Plugin Hybrid Composer 1.4.6 - Improper Access Restrictions

Cisco Wireless Controller 3.6.10E - Cross-Site Request Forgery

NoviSmart CMS - SQL injection

23.7.2019

Bugtraq

Malware

Phishing

Microsoft Outlook	23rd July 2019
Hotmail Outlook Deactivation Request

Vulnerebility

Scapy '_RADIUSAttrPacketListField' Class Remote Denial of Service Vulnerability
2019-07-23
http://www.securityfocus.com/bid/106674

FFmpeg CVE-2019-12730 Security Bypass Vulnerability
2019-07-23
http://www.securityfocus.com/bid/109317

Exploint

22.7.2019

Bugtraq

Malware

Ransom.Bitpaymer

Phishing

Vulnerebility

Linux Kernel CVE-2019-11811 Local Arbitrary Code Execution Vulnerability
2019-07-22
http://www.securityfocus.com/bid/108410

Exploint

Comtrend-AR-5310 - Restricted Shell Escape

BACnet Stack 0.8.6 - Denial of Service

Axway SecureTransport 5 - Unauthenticated XML Injection

19.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

GNOME gvfs CVE-2019-12795 Local Authorization Bypass Vulnerability
2019-07-19
http://www.securityfocus.com/bid/108741

Mozilla Firefox Multiple Security Vulnerabilities
2019-07-19
http://www.securityfocus.com/bid/109085

Mozilla Firefox and Firefox ESR Multiple Security Vulnerabilities
2019-07-19
http://www.securityfocus.com/bid/109086

Squid CVE-2019-13345 Multiple Cross Site Scripting Vulnerabilities
2019-07-19
http://www.securityfocus.com/bid/109095

Exploint

Web Ofisi Firma Rehberi 1 - 'il' SQL Injection

Web Ofisi Emlak 3 - 'emlak_durumu' SQL Injection

Web Ofisi Emlak 2 - 'ara' SQL Injection

Web Ofisi Platinum E-Ticaret 5 - 'q' SQL Injection

Web Ofisi E-Ticaret 3 - 'a' SQL Injection

fuelCMS 1.4.1 - Remote Code Execution

MAPLE Computer WBT SNMP Administrator 2.0.195.15 - Remote Buffer Overflow (EggHunter)

18.7.2019

Bugtraq

Malware

Win32/Crossza.A

Trojan.Tepok

Phishing

ICloud Inc..	18th July 2019
[RE] Confirmation �DNJj%fDzFNj%b%�N�%hjLbfNrRK

Vulnerebility

CKEditor CVE-2018-9861 Cross Site Scripting Vulnerability
2019-07-18
http://www.securityfocus.com/bid/103924

Exploint

Microsoft Windows 10 1903/1809 - RPCSS Activation Kernel Security Callback Privilege Escalation

WordPress Plugin OneSignal 1.17.5 - 'subdomain' Persistent Cross-Site Scripting

17.7.2019

Bugtraq

Malware

Trojan.Burtopinam

Phishing

Vulnerebility

Exploint

Windows - NtUserSetWindowFNID Win32k User Callback Privilege Escalation (Metasploit)

Linux - Broken Permission and Object Lifetime Handling for PTRACE_TRACEME

Oracle Siebel CRM 19.0 - Persistent Cross-Site Scripting

WinMPG iPod Convert 3.0 - 'Register' Denial of Service

MAPLE Computer WBT SNMP Administrator 2.0.195.15 - Remote Buffer Overflow

16.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

Exploint

PHP Laravel Framework 5.5.40 / 5.6.x < 5.6.30 - token Unserialize Remote Command Execution (Metasploit)

Microsoft Windows 10 < build 17763 - AppXSvc Hard Link Privilege Escalation (Metasploit)

Microsoft Compiled HTML Help / Uncompiled .chm File - XML External Entity Injection

DameWare Remote Support 12.0.0.509 - 'Host' Buffer Overflow (SEH)

CentOS Control Web Panel 0.9.8.838 - User Enumeration

CentOS Control Web Panel 0.9.8.836 - Privilege Escalation

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass

R 3.4.4 (Windows 10 x64) - Buffer Overflow SEH (DEP/ASLR Bypass)

15.7.2019

Bugtraq

Malware

Backdoor.Hannotog

Win32/TrojanDownloader.
Small.PET

Win32/Exploit.CVE-2018-0802.A

Win64/GoBot2

Phishing

Vulnerebility

VideoLAN VLC CVE-2019-13602 Heap Based Buffer Overflow Vulnerability
2019-07-14
http://www.securityfocus.com/bid/109158

Exploint

FlightPath < 4.8.2 / < 5.0-rc2 - Local File Inclusion

Microsoft Windows Remote Desktop - 'BlueKeep' Denial of Service (Metasploit)

Android 7 - 9 VideoPlayer - 'ihevcd_parse_pps' Out-of-Bounds Write

CISCO Small Business 200 / 300 / 500 Switches - Multiple Vulnerabilities

NETGEAR WiFi Router JWNR2010v5 / R6080 - Authentication Bypass

Streamripper 2.6 - 'Song Pattern' Buffer Overflow

14.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

Exploint

Microsoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation

11.7.2019

Bugtraq

Malware

Trojan.Fenkrib

Phishing

Vulnerebility

Linux Kernel CVE-2019-11477 Integer Overflow Vulnerability
2019-07-12
http://www.securityfocus.com/bid/108801

Symantec Messaging Gateway CVE-2019-12751 Privilege Escalation Vulnerability
2019-07-12
http://www.securityfocus.com/bid/108925

Oracle July 2019 Critical Patch Update Multiple Vulnerabilities
2019-07-12
http://www.securityfocus.com/bid/109125

Exploint

Xymon 4.3.25 - useradm Command Execution (Metasploit)

Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData

Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass / Remote Command Execution

Jenkins Dependency Graph View Plugin 0.13 - Persistent Cross-Site Scripting

Sahi Pro 8.0.0 - Remote Command Execution

MyT Project Management 1.5.1 - User[username] Persistent Cross-Site Scripting

Tenda D301 v2 Modem Router - Persistent Cross-Site Scripting

11.7.2019

Bugtraq

Malware

Phishing

PayPal	11th July 2019
New Update Confirm information

Vulnerebility

Multiple F5 BIG-IP Products CVE-2019-6631 Denial of Service Vulnerability
2019-07-11
http://www.securityfocus.com/bid/109119

Exploint

Sitecore 9.0 rev 171002 - Persistent Cross-Site Scripting

SNMPc Enterprise Edition 9/10 - Mapping Filename Buffer Overflow

10.7.2019

Bugtraq

Malware

Infostealer.Astaroth

Phishing

Chase Alerts	9th July 2019
Customer Service In Chase Bank.

Vulnerebility

Symantec Messaging Gateway CVE-2019-12751 Privilege Escalation Vulnerability
2019-07-10
http://www.securityfocus.com/bid/108925s

Exploint

Microsoft DirectWrite / AFDKO - Heap-Based Out-of-Bounds Read/Write in OpenType Font Handling Due to Empty ROS Strings

Microsoft DirectWrite / AFDKO - NULL Pointer Dereferences in OpenType Font Handling While Accessing Empty dynarrays

Microsoft DirectWrite / AFDKO - Multiple Bugs in OpenType Font Handling Related to the "post" Table

Microsoft DirectWrite / AFDKO - Out-of-Bounds Read in OpenType Font Handling Due to Undefined FontName Index

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling While Processing CFF Blend DICT Operator

Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readStrings

Microsoft DirectWrite / AFDKO - Heap-Based Out-of-Bounds Read/Write in OpenType Font Handling Due to Unbounded iFD

Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow Due to Integer Overflow in readTTCDirectory

Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readCharset

Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readFDSelect

Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readEncoding

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Incorrect Handling of blendArray

Microsoft DirectWrite / AFDKO - Interpreter Stack Underflow in OpenType Font Handling Due to Missing CHKUFLOW

Microsoft DirectWrite / AFDKO - Use of Uninitialized Memory While Freeing Resources in var_loadavar

Microsoft DirectWrite / AFDKO - Stack-Based Buffer Overflow in do_set_weight_vector_cube for Large nAxes

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Negative nAxes

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Negative cubeStackDepth

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling due to Out-of-Bounds cubeStackDepth

Mozilla Spidermonkey - Unboxed Objects Uninitialized Memory Access

Microsoft Windows - Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts

9.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

Exploint

Firefox 67.0.4 - Denial of Service

Apache mod_ssl < 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow (2)

8.7.2019

Bugtraq

Malware

Phishing

Microsoft Hotmail	8th July 2019
Termination Request For Your Hotmail Outlook Account

Vulnerebility

Redhat Openshift Container Platform CVE-2019-3889 Cross Site Scripting Vulnerability
2019-07-08
http://www.securityfocus.com/bid/109062

Exploint

WordPress Plugin Like Button 1.6.0 - Authentication Bypass

Karenderia Multiple Restaurant System 5.3 - SQL Injection

5.7.2019

Bugtraq

Malware

Phishing

Chase Online	5th July 2019
Your Chase Online Access placed on Restriction.

Vulnerebility

Red Hat Undertow CVE-2019-3888 Information Disclosure Vulnerability
2019-07-05
http://www.securityfocus.com/bid/108739

Exploint

Microsoft Exchange 2003 - base64-MIME Remote Code Execution

Karenderia Multiple Restaurant System 5.3 - Local File Inclusion

4.7.2019

Bugtraq

Malware

Phishing

Microsoft Hotmail	4th July 2019
Termination Request For Your Hotmail Outlook Account

Vulnerebility

Linux Kernel CVE-2019-11478 Denial of Service Vulnerability
2019-07-04
http://www.securityfocus.com/bid/108798

Linux Kernel CVE-2019-11477 Integer Overflow Vulnerability
2019-07-04
http://www.securityfocus.com/bid/108801

Exploint

3.7.2019

Bugtraq

Malware

OSX.Netwire

Phishing

Vulnerebility

IBM Spectrum Protect Plus Multiple Security Vulnerabilities
2019-07-03
http://www.securityfocus.com/bid/109003

Exploint

Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution (Metasploit)

Serv-U FTP Server - prepareinstallation Privilege Escalation (Metasploit)

Symantec DLP 15.5 MP1 - Cross-Site Scripting

2.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

Exploint

Mac OS X TimeMachine - 'tmdiagnose' Command Injection Privilege Escalation (Metasploit)

Centreon 19.04 - Remote Code Execution

1.7.2019

Bugtraq

Malware

Phishing

Vulnerebility

Linux Kernel CVE-2019-11479 Denial of Service Vulnerability
2019-07-01
http://www.securityfocus.com/bid/108818

Linux Kernel CVE-2019-11478 Denial of Service Vulnerability
2019-07-01
http://www.securityfocus.com/bid/108798

Linux Kernel CVE-2019-11477 Integer Overflow Vulnerability
2019-07-01
http://www.securityfocus.com/bid/108801

ABB PB610 Multiple Security Vulnerabilities
2019-07-01
http://www.securityfocus.com/bid/108886

Multiple ABB Products CVE-2019-7225 Hardcoded Credentials Vulnerability
2019-07-01
http://www.securityfocus.com/bid/108922

Exploint

FaceSentry Access Control System 6.4.8 - Remote SSH Root

FaceSentry Access Control System 6.4.8 - Remote Root Exploit

FaceSentry Access Control System 6.4.8 - Cross-Site Request Forgery

FaceSentry Access Control System 6.4.8 - Remote Command Injection

CyberPanel 1.8.4 - Cross-Site Request Forgery

Sahi pro 8.x - Directory Traversal

SAP Crystal Reports - Information Disclosure

ZoneMinder 1.32.3 - Cross-Site Scripting

PowerPanel Business Edition - Cross-Site Scripting

Varient 1.6.1 - SQL Injection

Linux Mint 18.3-19.1 - 'yelp' Command Injection

CiuisCRM 1.6 - 'eventType' SQL Injection

WorkSuite PRM 2.4 - 'password' SQL Injection