FreeBSD : groovy -- remote execution of untrusted code/DoS vulnerability (4af92a40-db33-11e6-ae1b-002590263bf5)

The Apache Groovy project reports : When an application with Groovy on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it is possible for an attacker to bake a special serialized object that will execute code directly when...

Adobe Flash Player - Integer Overflow

// Exploit Title: Adobe Flash Player - Integer Overflow // Exploit Author: Matteo Memelli ryujin@offensive-security // Date: 14/01/2017 // Original PoC: https://bugs.chromium.org/p/project-zero/issues/detail?id=323&can=1&q=Shader // CVE: CVE-2015-3104 // Reference:...

Input validation

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

CVE-2016-10135

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

CVE-2016-10135

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

CVE-2016-10135

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

CVE-2016-10135

Technical details for CVE-2016-10135 are not publicly provided in the supplied documents; monitor for updates as connected sources do not reveal affected components or remediation.

CVE-2016-10135: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

Cemu 1.6.4b - Information Leak + Buffer Overflow (Emulator Breakout) Vulnerability

Exploit for multiple platform in category local exploits For those who only care about one thing: the PoC is here. Mirror: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/41021.zip Overview Cemu is a closed-source Wii U emulator developed by Exzap. New versio...

HP Helion Eucalyptus Multiple Vulnerabilities

HP Helion Eucalyptus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eucalyptus:eucalyptus"...

Microsoft Office Word Remote Code Execution Vulnerability (3214291)

This host is missing an important security update according to Microsoft Bulletin MS17-002 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft SharePoint Server Remote Code Execution Vulnerability (3214291)

This host is missing an important security update according to Microsoft Bulletin MS17-002 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Cemu 1.6.4b - Information Leak Buffer Overflow (Emulator Breakout)

Cemu 1.6.4b - Information Leak Buffer Overflow Emulator Breakout For those who only care about one thing: the PoC is here. Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/41021.zip Overview Cemu is a closed-source Wii U emulator developed by Exzap. New...

Cemu 1.6.4b - Information Leak / Buffer Overflow (Emulator Breakout)

For those who only care about one thing: the PoC is here. Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/41021.zip Overview Cemu is a closed-source Wii U emulator developed by Exzap. New versions are released to those who donate to him via his Patreon...

MS15-086: Security update for Update Rollup 7 for System Center 2012 R2 Operations Manager: August 11, 2015

MS15-086: Security update for Update Rollup 7 for System Center 2012 R2 Operations Manager: August 11, 2015 Introduction This article describes the issues that are fixed in Update Rollup 7 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation...

Description of the security update for Update Rollup 5 for System Center 2012 R2 Virtual Machine Manager

Description of the security update for Update Rollup 5 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 5 for Microsoft System Center 2012 R2 Virtual Machine Manager. This update rollup contains two updates for System...

A hotfix rollup package (build 4.1.3419.0) is available for Forefront Identity Manager 2010 R2

A hotfix rollup package build 4.1.3419.0 is available for Forefront Identity Manager 2010 R2 Introduction A hotfix rollup package build 4.1.3419.0 is available for Microsoft Forefront Identity Manager FIM 2010 R2. This hotfix rollup package resolves some issues that are described in the "More...

FreeBSD : samba -- multiple vulnerabilities (e4bc323f-cc73-11e6-b704-000c292e4fd8)

Samba team reports : CVE-2016-2123 Authenticated users can supply malicious dnsRecord attributes on DNS objects and trigger a controlled memory corruption. CVE-2016-2125 Samba client code always requests a forwardable ticket when using Kerberos authentication. This means the target server, which...

Debian Security Advisory DSA 3745-1 (squid3 - security update)

Saulius Lapinskas from Lithuanian State Social Insurance Fund Board discovered that Squid3, a fully featured web proxy cache, does not properly process responses to If-None-Modified HTTP conditional requests, leading to client-specific Cookie data being leaked to other clients. A remote attacker...

Cisco Intercloud Fabric Database Static Credentials Vulnerability (cisco-sa-20161221-icf)

A vulnerability in Cisco Intercloud Fabric for Business and Cisco Intercloud Fabric for Providers could allow an unauthenticated, remote attacker to connect to the database used by these products. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a reference...