Italiano
English
In azienda è la tecnologia del momento, già conosciuta dall'85% dei manager che ne hanno compreso il potenziale per lo sviluppo, anche grazie ai primi progetti concreti in cui si sta affermando come modalità di certificazione dei dati in vari settori. Ma la blockchain inizia a fare breccia anche...
NOTIZIE
SERVIZI
|
Il servizio analizza un log di richieste DNS e identifica se all’interno sono stati risolti dei nomi a dominio che... |
Il servizio offre una piattaforma che consente ai Registrar di verificare eventuali problemi di performance e sicurezza... |
Il servizio utilizza una raccolta di tweet provenienti da utenti appartenenti a Twitter i cui tweet utilizzano parole... |
Il servizio analizza gruppi di email file (formato .eml) per identificare le email indesiderate (SPAM). Il servizio... |
ULTIMI CVE
| Published | Description | |
|---|---|---|
| CVE-2018-7576 |
23-04-2019 17:29:00 |
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent. |
| CVE-2019-7727 |
23-04-2019 16:32:46 |
In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restricting registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol by using the JMX connector. The observed affected TCP port is 6338 but, based on the product's configuration, a different one could be vulnerable. |
| CVE-2019-10711 |
23-04-2019 16:32:43 |
Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware (until Webware version V1.0.1) allows attackers to view an RTSP stream by connecting to the stream with hidden credentials (guest or user) that are neither displayed nor configurable in the camera's CamHi or keye mobile management application. This affects certain devices labeled as HI3510, HI3518, LOOSAFE, LEVCOECAM, Sywstoda, BESDER, WUSONGLUSAN, GADINAN, Unitoptek, ESCAM, etc. |
| CVE-2019-10710 |
23-04-2019 16:32:43 |
Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE, LEVCOECAM, Sywstoda, BESDER, WUSONGLUSAN, GADINAN, Unitoptek, ESCAM, etc. |
| CVE-2019-2721 |
23-04-2019 15:32:57 |
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). |
Pages
ULTIMI EXPLOIT
| Date | Title | Platform | Author |
|---|---|---|---|
|
17-04-2019 |
MailCarrier 2.51 - POP3 'RETR' SEH Buffer Overflow | windows | Dino Covotsos |
|
17-04-2019 |
DHCP Server 2.5.2 - Denial of Service (PoC) | windows | Victor Mondragón |
|
17-04-2019 |
Oracle Java Runtime Environment - Heap Corruption During TTF font Rendering in sc_FindExtrema4 | multiple | Google Security Research |
|
16-04-2019 |
PCHelpWare V2 1.0.0.5 - 'Group' Denial of Service (PoC) | windows | Alejandra Sánchez |
|
16-04-2019 |
Microsoft Windows 10 1809 - LUAFV PostLuafvPostReadWrite SECTION_OBJECT_POINTERS Race Condition Privilege Escalation | windows | Google Security Research |