Debian DSA-2949-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation : - CVE-2014-3144/ CVE-2014-3145 A local user can cause a denial of service system crash via crafted BPF instructions. - CVE-2014-3153 Pinkie Pie discovered an issue in th...

Debian Security Advisory DSA 2949-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation: CVE-2014-3144 / CVE-2014-3145 A local user can cause a denial of service system crash via crafted BPF instructions. CVE-2014-3153 Pinkie Pie discovered an issue in the...

Wordpress Plugin CopySafe Web Protection Shell Upload (0day) Vulnerability

Exploit for php platform in category web applications Title : Wordpress Plugin CopySafe Web Protection Shell Upload Vulnerability Author : Aloulou Date : 01/06/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : wordpress.org Google Dork :...

[SECURITY] Fedora 19 Update: 0ad-0.0.15-4.fc19

0 A.D. pronounced "zero ey-dee" is a free, open-source, cross-platform real-time strategy RTS game of ancient warfare. In short, it is a historically-based war/economy game that allows players to relive or rewrite the history of Western civilizations, focusing on the years between 500 B.C. and 50...

xnews 3-0-0 Cross Site Scripting

=========================================================== xnews3-0-0 XSS Vulnerability ----------------------------------------------------------- foun by :kurd-team , Exploiter group : kurdish hackers team contact : [email protected] site : kurdsystem.com...

Cisco Adaptive Security Appliance 远程权限提升漏洞

Bugtraq ID:66747 CVE ID:CVE-2014-2126 Cisco ASA 5500系列自适应安全设备是用于提供安全和VPN服务的模块化平台，可提供防火墙、IPS、anti-X和VPN服务。 Cisco Adaptive Security Appliance ASA Software 8.25.47之前版本、8.47.5之前版本、8.71.11之前版本、9.03.10之前版本、9.13.4之前版本在实现上存在安全漏洞，这可使经过身份验证的远程用户通过Level-0 ASDM访问，利用此漏洞获取权限。 0 Cisco Adaptive Security Applianc...

WinRAR Filename Spoofing Exploit

This Metasploit module abuses a filename spoofing vulnerability in WinRAR. The vulnerability exists when opening ZIP files. The file names showed in WinRAR when opening a ZIP file come from the central directory, but the file names used to extract and open contents come from the Local File Header...

DSA-2888-1 ruby-actionpack-3.2 - security update

Bulletin has no description...

Microsoft Office memory corruption

Microsoft Word RTF parsing 0-day vulnerability is exploited in-the-wild...

QNX 6.5.0 x86 io-graphics - Local root Exploit

Exploit for QNX platform in category local exploits / QNX 6.5.0 x86 io-graphics local root exploit by cenobyte 2013 - vulnerability description: Setuid root /usr/photon/bin/io-graphics on QNX is prone to a buffer overflow. The vulnerability is due to insufficent bounds checking of the PHOTON2HOME...

QNX 6.5.0 x86 phfont - Local root Exploit

Exploit for QNX platform in category local exploits / QNX 6.5.0 x86 phfont local root exploit by cenobyte 2013 - vulnerability description: Setuid root /usr/photon/bin/phfont on QNX is prone to a buffer overflow. The vulnerability is due to insufficent bounds checking of the PHOTONHOME environmen...

XDA Forum hackers again proof Sony Xperia Z2 UI-bug warning-the black bar safety net

Recently a senior XDA developer Forum member in the online release of more than one Xperia Z2 real machine picture, and shows the phone running Android 4.3 system, using the new UI, the phone use is very unstable, the UI has been crashing. Today, the XDA member latest release of the Xperia Z2...

PHP 'open_basedir' Security Bypass Vulnerability

PHP is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

kernel: security and bugfix update (important)

The Linux kernel was updated to fix various bugs and security issues: - mm/page-writeback.c: do not count anon pages as dirtyable memory reclaim stalls. - mm/page-writeback.c: fix dirtybalancereserve subtraction from dirtyable memory reclaim stalls. - compatsysrecvmmsg X32 fix bnc860993...

SuSE 11.3 Security Update : pixman (SAT Patch Number 8697)

This update fixes the following security issue with pixman : - Integer underflow when handling trapezoids. bnc853824, CVE-2013-6425 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

unbreakable enterprise kernel security update

kernel-uek 3.8.13-16.2.3.el6uek - ipoutput: do skb ufo init for peeked non ufo skb as well Jiri Pirko Orabug: 17951078 CVE-2013-4470 - ip6output: do skb ufo init for peeked non ufo skb as well Jiri Pirko Orabug: 17951080 CVE-2013-4470 - KVM: x86: fix guest-initiated crash with x2apic CVE-2013-637...

XDCMS订餐系统SQL注入#2（官方demo演示）

简要描述： XDCMS订餐系统SQL注入+报路径+任意物品0元够（官方demo演示） 详细说明： XDCMS订餐系统SQL注入2（官方demo演示） 此SQL注入在提交订单时，进行查询订单中物品价格时导致注入。 此SQL注入不仅仅： 1、SQL注入 2、还会爆出系统绝对路径 3、最重要的是由于sql注入，导致查询价格失败，但是订单提交仍能成功，导致0元购买任意物品。 第一步选择物品： 第二步提交订单： 第三步抓包，修改数据： cartid为购买的每个物品的id号，这里实在进行查询物品的属性，如价格等。 这里的cartid没有过滤导致SQL注入。 还爆出了系统绝对路径。...

IPMI Cipher Suite 0 (Cipher Zero) Authentication Bypass Vulnerability (IPMI Protocol)

Intelligent Platform Management Interface IPMI services are prone to an authentication bypass vulnerability through the use of cipher suite 0 aka cipher zero. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities

Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities +------------------------------------------------------------------------------+ | HOTBOX is the leading router/modem appliance of | | HOT Cable communication company in israel. | | The Appliance is manufactured by SAGEMCOM | | and carries the...

HOTBOX 2.1.11 CSRF / Traversal / Denial Of Service

HOTBOX router/modem version 2.1.11 suffers from cross site request forgery, denial of service, script injection, and directory traversal vulnerabilities. Denial of service and cross site request forgery proof of concepts included...