5013 matches found
java-1.8.0-openjdk security update
1:1.8.0.31-1.b13 - Update to January CPU patch update. - Resolves: RHBZ1180299 1:1.8.0.25-4.b17 - updated aarch64 sources - epoch synced to 1 - all ppcs excluded from classes dump1156151 - Resolves: rhbz1173706...
VideoLAN VLC Media Player Stack Buffer Overflow Vulnerability
VideoLAN VLC media player is the multimedia player of VideoLAN program. A stack buffer overflow vulnerability exists in multiple files of VideoLAN VLC Media Player in the 'ASFObjectDumpDebug', 'AVIChunkDumpDebuglevel', and 'the MP4BoxDumpStructure' functions are vulnerable to a stack buffer...
Windows Password Kracker - Free Windows Password Recovery Software
Windows Password Kracker is a free software to recover the lost or forgotten Windows password. It can quickly recover the original windows password from either LM LAN Manager or NTLM NT LAN Manager Hash. Windows encrypts the login password using LM or NTLM hash algorithm. Since these are one way...
mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP...
mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP...
mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP...
ZTE ZXDSL-931VII - Unauthenticated Configuration Dump
No description provided by source. Exploit Title: ZTE ZXDSL-931VII Unauthenticated Configuration Dump Google Dork: use your imagination Date: 09-12-2014 Exploit Author: L0ukanik0sGR Vendor Homepage: www.zte.com.cn Software Link:...
Scientific Linux Security Update : wireshark on SL5.x i386/x86_64 (20141021)
Multiple flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2014-6429, CVE-2014-6430, CVE-2014-6431, CVE-2014-6432 Several denial of service flaws...
Moderate: Red Hat Security Advisory: wireshark security update
Updated wireshark packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...
PT-2014-4468
Name of the Vulnerable Software and Affected Versions CloudBees Jenkins versions prior to 1.551 CloudBees Jenkins LTS versions prior to 1.532.2 Description The issue allows remote authenticated users with the ADMINISTER permission to obtain sensitive information. This is related to the doIndex...
jenkins: information leak via system diagnostic functionalities (SECURITY-73)
The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump...
Mandriva Linux Security Advisory : dump (MDVSA-2014:181)
Updated dump packages fix security vulnerability : An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker CVE-2014-4607. The dump package is bui...
ZTE ZXDSL-931VII - Configuration Dump
ZTE ZXDSL-931VII - Configuration Dump Exploit Title: ZTE ZXDSL-931VII Unauthenticated Configuration Dump Google Dork: use your imagination Date: 09-12-2014 Exploit Author: L0ukanik0sGR Vendor Homepage: www.zte.com.cn Software Link:...
ZTE ZXDSL-931VII - Configuration Dump
Exploit Title: ZTE ZXDSL-931VII Unauthenticated Configuration Dump Google Dork: use your imagination Date: 09-12-2014 Exploit Author: L0ukanik0sGR Vendor Homepage: www.zte.com.cn Software Link:...
MGASA-2014-0378 Updated dump package fix CVE-2014-4607
Updated dump packages fix security vulnerability: An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker CVE-2014-4607. The dump package is buil...
Updated dump package fix CVE-2014-4607
Updated dump packages fix security vulnerability: An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker CVE-2014-4607. The dump package is buil...
建站之星Sitestar设计缺陷可dump数据库（有条件）
简要描述： 有条件的缺陷。 详细说明： 还是短文件名的问题，这种设计就是一个缺陷。 首先看下默认情况备份以后的文件名，每次备份会产生两个文件 一个为sql，一个是经过压缩的zip backup20140816134106v1.sql backup20140816134106v.zip 可以看到是 backup日期时间v 这样的结构 超过了9个字符，可以利用短文件名漏洞 只要管理员备份过文件，就可以利用 backup1.zip backup1.sql 漏洞证明：...
FengCMS的CSRF漏洞可导致数据库被dump
简要描述： 重要功能未进行csrf token验证导致可被脱裤 详细说明： 后台管理中的数据备份功能未进行csrf token验证。 攻击者制作内容如下的csrf.php并放到attacker.com下面： 随后将http://attacker.com/csrf.php这个URL发送给受害者（网站管理员）。如果管理员在打开该URL时处于登录状态就会以管理员的身份像目标服务器发送备份数据库的请求： ?controller=dbmanage&operate=save&type=0...
Pine 4.x From: Field Heap Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6120/info A heap corruption may occur when Pine receives an email message containing a particularly crafted From: address. Though the address is RFC compliant, Pine reportedly fails to parse it correctly, resulting in a...