Information Disclosure

sync-exec is vulnerable to information disclosure attacks. It uses a world readable tmp directory as a buffer before returning values. Since this directory is world-readable, any other user on the server is able to read the temporary files while they exist, potentially obtaining confidential...

CVE-2016-2565

Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to read sent e-mail messages, aka SVE-2015-5081...

Sync Breeze Enterprise 9.5.16 - 'Import Command' Local Buffer Overflow

!/usr/bin/env python Exploit Title: Sync Breeze Enterprise 9.5.16 - 'Import Command' Buffer Overflow SEH Date: 2017-03-29 Exploit Author: Daniel Teixeira Author Homepage: www.danielteixeira.com Vendor Homepage: http://www.syncbreeze.com Software Link:...

Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities

Document Title: =============== Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2049 View Video: https://www.youtube.com/watch?v=qLC8f7liPk8 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2045...

Sync Breeze Enterprise 9.5.16 Buffer Overflow

!/usr/bin/env python Exploit Title: Sync Breeze Enterprise v9.5.16 - Remote buffer overflow SEH Date: 2017-03-29 Exploit Author: Daniel Teixeira Vendor Homepage: http://syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv9.5.16.exe Version: 9.5.16 Tested on: Windows ...

Sync Breeze Enterprise 9.5.16 - GET Buffer Overflow (SEH) Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python Exploit Title: Sync Breeze Enterprise v9.5.16 - Remote buffer overflow SEH Date: 2017-03-29 Exploit Author: Daniel Teixeira Vendor Homepage: http://syncbreeze.com Software Link:...

Sync Breeze Enterprise 9.5.16 Buffer Overflow

!/usr/bin/env python Exploit Title: Sync Breeze Enterprise 9.5.16 - 'Import Command' Buffer Overflow SEH Date: 2017-03-29 Exploit Author: Daniel Teixeira Author Homepage: www.danielteixeira.com Vendor Homepage: http://www.syncbreeze.com Software Link:...

Sync Breeze Enterprise 9.5.16 - GET Remote Buffer Overflow (SEH)

Sync Breeze Enterprise 9.5.16 - GET Remote Buffer Overflow SEH !/usr/bin/env python Exploit Title: Sync Breeze Enterprise v9.5.16 - Remote buffer overflow SEH Date: 2017-03-29 Exploit Author: Daniel Teixeira Vendor Homepage: http://syncbreeze.com Software Link:...

Sync Breeze Enterprise 9.5.16 - Import Command Local Buffer Overflow

Sync Breeze Enterprise 9.5.16 - Import Command Local Buffer Overflow !/usr/bin/env python Exploit Title: Sync Breeze Enterprise 9.5.16 - 'Import Command' Buffer Overflow SEH Date: 2017-03-29 Exploit Author: Daniel Teixeira Author Homepage: www.danielteixeira.com Vendor Homepage:...

Sync Breeze Enterprise 9.5.16 - 'GET' Remote Buffer Overflow (SEH)

!/usr/bin/env python Exploit Title: Sync Breeze Enterprise v9.5.16 - Remote buffer overflow SEH Date: 2017-03-29 Exploit Author: Daniel Teixeira Vendor Homepage: http://syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv9.5.16.exe Version: 9.5.16 Tested on: Windows ...

Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities

Document Title: =============== Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2049 View Video: https://www.youtube.com/watch?v=qLC8f7liPk8 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2045...

Sync Breeze v9.5.16 - Buffer Overflow Vulnerabilities

Document Title: =============== Sync Breeze v9.5.16 - Buffer Overflow Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2045 Video: https://www.vulnerability-lab.com/getcontent.php?id=2049 Release Date: ============= 2017-03-28 Vulnerabili...

Moderate: Red Hat Security Advisory: Red Hat Gluster Storage 3.2.0 security, bug fix, and enhancement update

An update is now available for Red Hat Gluster Storage 3.2 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2017-344)

This update for MozillaFirefox and mozilla-nss fixes the following issues : MozillaFirefox was updated to Firefox 52.0 boo1028391 - requires NSS = 3.28.3 - Pages containing insecure password fields now display a warning directly within username and password fields. - Send and open a tab from one...

Cybozu KUNAI for Android information management vulnerability

Overview Cybozu KUNAI for Android is a mobile client software for using Cybozu from an Android device. Cybozu KUNAI for Android provides a function to output log information when synchronizing data with Cybozu, however the function is disabled by default. Cybozu KUNAI for Android contains an issu...

JVN#88745657: Cybozu KUNAI for Android information management vulnerability

Cybozu KUNAI for Android is a mobile client software for using Cybozu from an Android device. Cybozu KUNAI for Android provides a function to output log information when synchronizing data with Cybozu, however the function is disabled by default. Cybozu KUNAI for Android contains an issue where i...

[SECURITY] Fedora 25 Update: calibre-2.78.0-1.fc25

Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...

[SECURITY] Fedora 24 Update: calibre-2.78.0-1.fc24

Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...

Tmp files readable by other users

Overview Affected versions of sync-exec use files located in /tmp/ to buffer command results before returning values. As /tmp/ is almost always set with world readable permissions, this may allow low privilege users on the system to read the results of commands run via sync-exec under a higher...

Update Rollup 11 for System Center 2012 R2 Data Protection Manager

Update Rollup 11 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 11 for Microsoft System Center 2012 R2 Data Protection Manager. It also contains the installation instructions for this update. Note We recommend that...