Italiano
English
Esce oggi il Cybersecurity Act, nuovo strumento normativo europeo che punta a stabilire delle regole per una sicurezza informatica più coesa e comunitaria. Si tratta di un Regolamento che ha lo scopo di creare un quadro europeo ben definito sulla certificazione della sicurezza informatica di...
NOTIZIE
SERVIZI
|
Il servizio mostra una rappresentazione 3D del traffico di rete relativo ad attacchi ad una honeypot a Pisa. Inoltre,... |
Il servizio raccoglie informazioni relative ad exploit pubblici aggiornati giornalmente attraverso il repository... |
Il servizio utilizza una raccolta di tweet provenienti da utenti appartenenti a Twitter i cui tweet utilizzano parole... |
Il servizio analizza un log di richieste DNS e identifica se all’interno sono stati risolti dei nomi a dominio che... |
ULTIMI CVE
| Published | Description | |
|---|---|---|
| CVE-2019-12834 |
16-07-2019 14:15:12 |
In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/ URI. |
| CVE-2018-13442 |
16-07-2019 14:15:11 |
SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter. |
| CVE-2019-13616 |
16-07-2019 13:15:12 |
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c. |
| CVE-2019-13618 |
16-07-2019 13:15:12 |
In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c. |
| CVE-2019-13617 |
16-07-2019 13:15:12 |
njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call and then an njs_parser_scope_error call. |
Pages
ULTIMI EXPLOIT
| Date | Title | Platform | Author |
|---|---|---|---|
|
12-07-2019 |
MyT Project Management 1.5.1 - User[username] Persistent Cross-Site Scripting | php | Metin Yunus Kandemir |
|
12-07-2019 |
Microsoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation | windows | Google Security Research |
|
12-07-2019 |
Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData | windows | Google Security Research |
|
12-07-2019 |
Sahi Pro 8.0.0 - Remote Command Execution | java | AkkuS |
|
12-07-2019 |
Citrix SD-WAN Appliance 10.2.2 - Authentication Bypass / Remote Command Execution | cgi | Chris Lyne |