HP-UX PHKL_44305 : s700_800 11.11 exec(2) patch

s700800 11.11 exec2 patch : A potential security vulnerability have been identified with HP-UX programs using the execve2 system call. The vulnerability could be exploited locally to create an elevation of privilege. References: CVE-2015-2132 SSRT102037. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2015-2442

The CVE-2015-2442 entry concerns Microsoft Internet Explorer (IE) versions 8–11 and Edge, described as a memory corruption vulnerability that allows remote code execution or denial of service when a user visits a crafted site. The description explicitly labels it as a Memory Corruption Vulnerabil...

Micro Focus NetIQ Security Solutions for iSeries Stack Buffer Overflow Vulnerability

NetIQ Security Solutions for NetIQ, Inc. Micro Focus NetIQ Security Solutions for iSeries version 8.1 The NetIQExec.dll file in the NetIQExecObject.NetIQExec.1 ActiveX control's ' SafeShellExecute' method in the NetIQExecObject.NetIQExec.1 ActiveX control in the NetIQExec.dll file contains a...

php: pcntl_exec() accepts paths with NUL character

It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions...

linux/x86 exec('/bin/dash') - shellcode 45 bytes

/ Title: Linux/x86 exec'/bin/dash' - shellcode 45 bytes Platform: linux/x8664 Date: 2015-06-15 Author: Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es Twitter : https://twitter.com/rezesp FaceBook :...

linux/x86 exec ('/bin/dash') - shellcode 45 bytes

/ Title: Linux/x86 exec'/bin/dash' - shellcode 45 bytes Platform: linux/x8664 Date: 2015-06-15 Author: Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es Twitter : https://twitter.com/rezesp FaceBook :...

Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)

Hello, Your current version of apache 2.2.22 for http://aanbieding.marktplaats.com is vulnerable to many issues like DoS, XSS and Code Exec 1. DoS Refer: http://www.cvedetails.com/cve/CVE-2014-0231/ http://www.cvedetails.com/cve/CVE-2014-0098/ http://www.cvedetails.com/cve/CVE-2013-6438/...

openSUSE Security Update : fuse (openSUSE-2015-401)

Update to version 2.9.4 - fix exec environment for mount and umount bsc931452, CVE-2015-3202 - properly restore the default signal handler - fix directory file handle passed toioctl method. - fix for uids/gids larger than 2147483647 - initialize stat buffer passed to getattr and fgetattr...

Microsoft Internet Explorer HTTP Response Double Free Memory Corruption (MS08-045) - Ver2 (CVE-2008-2256)

Microsoft Internet Explorer is the most widely used Internet browser. . A remote code execution vulnerability was reported in the way Microsoft Internet Explorer accesses an object that has not been correctly initialized or that has been deleted. By convincing a user to visit a specially crafted...

Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17

Title: Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download Site: https://wordpress.org/plugins/videowhisper-video-presentation/ Vendor: http://www.videowhisper.com/ Vendor Notified: 2015-03-29...

CVE-2015-2754

CVE-2015-2754 affects the FreeXL library. A vulnerability in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and potentially execute arbitrary code via a crafted Excel workbook, related to a “premature EOF.” The issue affects FreeXL versions earlier th...

WordPress Plugin InBoundio Marketing 1.0 - Shell Upload Vulnerability

Exploit for php platform in category web applications Dx . Made In Algeria . xZ Title : WordPress plugin InBoundio Marketing Shell Upload Vulnerability Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Upload /...

CVE-2015-0644

CVE-2015-0644 affects Cisco IOS XE AppNav. The vulnerability arises from improper handling of TCP packets, allowing an unauthenticated, remote attacker to cause either arbitrary code execution or a device reload (DoS) via a crafted TCP packet. Affected are IOS XE 3.8–3.10 before 3.10.3S, 3.11 bef...

WordPress InBoundio Marketing Shell Upload

Dx . Made In Algeria . xZ Title : WordPress plugin InBoundio Marketing Shell Upload Vulnerability Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Upload / Code Exec 3 3 Greetings t0 Palestine 3 3 ! Vendor :...

Fedora 20 : php-5.5.22-1.fc20 (2015-2328)

19 Feb 2015, PHP 5.5.22 Core : - Fixed bug 67068 getClosure returns somethings that's not a closure. Danack at basereality dot com - Fixed bug 68925 Mitigation for CVE-2015-0235 ' GHOST: glibc gethostbyname buffer overflow. Stas - Fixed bug 68942 Use after free vulnerability in unserialize with...

Centreon 'insertLog()' Function RCE

The Centreon application hosted on the remote web server is affected by a remote code execution vulnerability due to a failure to properly sanitize user-supplied input before using it in a SQL query. The application uses the 'echo' system command with the PHP exec function which allows a remote,...

Low: Red Hat Bug Fix Advisory: docker bug fix and enhancement update

An updated docker package that fixes several bugs and adds various enhancements is now available for Red Hat Enterprise Linux 7 Extras. Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually...

NASA Orion - Bypass, Persistent Issue & Embed Code Exec

Document Title: =============== NASA Orion - Bypass, Persistent Issue & Embed Code Exec References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1339 VU666988 US CERT Vulnerability Magazine:...

MS14-066: Vulnerability in SChannel could allow remote code execution: November 11, 2014

None None...

e-Commerce Vision Design Group Code injection Vulnerability

Exploit for php platform in category web applications Exploit Title: e-Commerce Vision Design Group Code injection Date: 10/09/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : email protected | FB.Com/Pakistani1337 Greetz : KhantastiC - b0x - 1337 - H4x0rl1f3 - Shadow008 - Invectus...