Moderate: Red Hat Security Advisory: icedtea-web security, bug fix, and enhancement update

An update for icedtea-web is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

UBUNTU-CVE-2016-4544

The exifprocessTIFFinJPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted header data...

WordPress Google SEO Pressor Snippet Plugin <= 1.2.6 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability, because these parameters are not sanitized: "Address Region", "Longitude", "Latitude", "Event type", "Offer aggregate", "Low Price", "High Price", "Offer Url", "Price", "Events Website", "Offer Quantity", "Price valid Until",...

How to configure Desktop or Start Menu shortcuts With Citrix Receiver 4.x

Steps to configure Desktop or Start Menu shortcuts...

April 12, 2016 — KB3147461 (OS Build 10240.16769)

None None...

START!? - Menu-style Drawer - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application START!? - Menu-style Drawer published at the 'play' market has multiple vulnerabilities...

Start MyPeugeot - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Start MyPeugeot published at the 'play' market has multiple vulnerabilities...

Start Deutsch Verb - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Start Deutsch Verb published at the 'play' market has multiple vulnerabilities...

Start-App - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Start-App published at the 'play' market has multiple vulnerabilities...

TRS(ids新老版本)设计缺陷(xxe/用户信息泄露包括密码等)

简要描述： TRSids设计缺陷xxe/用户信息泄露包括密码，好久没有发过漏洞了，突然上来看了看，发现漏洞提交页面都变了 详细说明： 首先我们看看web.xml配置文件: ServiceServlet com.trs.idm.admin.service.ServiceServlet ServiceServlet /service 跟进ServiceServlet protected void serviceHttpServletRequest request, HttpServletResponse response throws ServletException, IOExceptio...

PT-2016-6698 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.6.3 on powerpc platforms Description: The issue is related to the mishandling of transactional state by the start thread function in the Linux kernel, which can be exploited by local users to cause a denial of...

Denial of Service Vulnerability in Multiple HP Products

HP ZBook and so on are the American Hewlett-Packard HP company's computer products.ZBook is a set of mobile workstations high-performance mobile computers; HP EliteBook Folio 1000/800/700 Series are business computer products; HP Z240 Tower/Z240 SFF/Z238 Microtower Workstation N51 are workstation...

PT-2016-5076

Name of the Vulnerable Software and Affected Versions Sure Start on HP Commercial PCs 2015 Description The issue allows local users with administrative access to cause a denial of service, resulting in BIOS recovery failure. Recommendations For Sure Start on HP Commercial PCs 2015, at the moment,...

UBUNTU-CVE-2016-2841

The ne2000receive function in the NE2000 NIC emulation support hw/net/ne2000.c in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via crafted values for the PSTART and PSTOP registers, involving ring buffer control...

CVE-2016-2243: Improper Access Control

Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service BIOS recovery failure by leveraging administrative access...

HPSBHF03439 rev.2 - HP Commercial PCs with Sure Start, Local Denial of Service

Potential Security Impact Denial of Service DoS Source: Hewlett­Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY HP has identified a potential security vulnerability with the Sure Start implementation on certain 2015 commercial platforms. This vulnerability could be...

Oracle to Kill Java Plugin

It’s the end of an era. Oracle has announced its intent to nail the coffin shut on the Java browser plugin. The company confirmed Wednesday that it expects to deprecate the plugin in JDK 9, slated for release in September, and JRE, in a future Java SE release. Dalibor Topic, a member of Oracle’s...

Apple Mac OSX iOS - Double-Delete IOHIDEventQueue::start Code Execution

Apple Mac OSX iOS - Double-Delete IOHIDEventQueue::start Code Execution Source: https://code.google.com/p/google-security-research/issues/detail?id=542 The IOHIDLibUserClient allows us to create and manage IOHIDEventQueues corresponding to available HID devices. Here is the ::start method, which...

Apple Mac OSX / iOS - Double-Delete IOHIDEventQueue::start Code Execution

Source: https://code.google.com/p/google-security-research/issues/detail?id=542 The IOHIDLibUserClient allows us to create and manage IOHIDEventQueues corresponding to available HID devices. Here is the ::start method, which can be reached via the IOHIDLibUserClient::startQueue external method:...

JRockit Java Platform Data Read Modify

The vulnerability of the Libraries sub-component in JRockit and Java Platform software platforms is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, add, or delete data through network packets via the Java Web...