PT-2017-1606

Name of the Vulnerable Software and Affected Versions Microsoft Skype version 7.16.0.102 Description The issue exists due to the way .dll files are loaded by Skype, allowing an unauthenticated, remote attacker to execute arbitrary code on the targeted system. The specific flaw is within the...

Debian Security Advisory DSA 3816-1 (samba - security update)

Jann Horn of Google discovered a time-of-check, time-of-use race condition in Samba, a SMB/CIFS file, print, and login server for Unix. A malicious client can take advantage of this flaw by exploting a symlink race to access areas of the server file system not exported under a share definition...

Microsoft Application Verifier exposed 0day vulnerabilities, the impact of Trend Micro, Kaspersky, Symantec, including a large number of security products-vulnerability warning-the black bar safety net

Recently, Cybellum company found a 0-day vulnerability, can completely control most of the security product. This vulnerability is called“DoubleAgent”is a double-sided Spy, and many security vendors by DoubleAgent effects, including Avast, AVG, Avira, Bitdefender, Trend Micro, Comodo Comodo, ESET...

Disable TELNET! Cisco finds 0-Day in CIA Dump affecting over 300 Network Switch Models

Cisco is warning of a new critical zero-day IOS / IOS XE vulnerability that affects more than 300 of its switch models. The company identified this highest level of vulnerability in its product while analyzing "Vault 7" — a roughly 8,761 documents and files leaked by Wikileaks last week, claiming...

[SECURITY] [DLA 856-1] tzdata new upstream version

Package : tzdata Version : 2017a-0+deb7u1 This update includes the changes in tzdata 2017a. Notable changes are: - Mongolia no longer observes DST. - Magallanes region diverges from Santiago starting 2017-05-13, the America/PuntaArenas zone has been added. For Debian 7 "Wheezy", these problems ha...

CVE-2017-6210

The vrenddecodereset function in vrenddecode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service NULL pointer dereference and QEMU process crash by destroying context 0 zero...

CVE-2017-6210

The vrenddecodereset function in vrenddecode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service NULL pointer dereference and QEMU process crash by destroying context 0 zero...

PT-2017-16948

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue allows local guest OS users to cause a denial of service by destroying context 0, resulting in a NULL pointer dereference and a QEMU process crash. This is due to a problem in the vre...

http-vuln-cve2017-5638 NSE Script

Detects whether the specified URL is vulnerable to the Apache Struts Remote Code Execution Vulnerability CVE-2017-5638. Script Arguments http-vuln-cve2017-5638.path The URL path to request. The default path is "/". http-vuln-cve2017-5638.method The HTTP method for the request. The default method ...

Out-of-bounds

An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse in libytnef...

AIX 7.2 TL 0 : bind (IV93403) (deprecated)

https://vulners.com/cve/CVE-2016-9131 https://vulners.com/cve/CVE-2016-9131 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses during recursion. By sending a malformed response to a RTYPE ANY query, a remote attacker could exploit this vulnerability to...

SMB denial of service vulnerability in the web application on the use-vulnerability warning-the black bar safety net

CVE-2017-0016 SMB 0 day vulnerability can lead to Windows System denial of service, the present article is mainly to explain the vulnerability in a web application use. 2017 2 2 June, security researchers announced a exists in Microsoft Windows SMB in the 0 day Vulnerability, CVE－2017-0016, the...

[SECURITY] Fedora 24 Update: mujs-0-8.20170124git4006739.fc24

MuJS is a lightweight Javascript interpreter designed for embedding in other software to extend them with scripting capabilities...

CVE-2017-3844

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are...

CVE-2016-6249: Exposure of Sensitive Information to an Unauthorized Actor

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files...

PT-2017-8942

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.0 through 11.6.1 F5 BIG-IP version 12.0.0 Description The issue allows local users to obtain sensitive information by reading log files. Specifically, REST requests that timeout during user account authentication may lo...

Mozilla Firefox WebGL Proof Of Concept

Exploit Title: Integer overflow happens WebGL system in Mozila Firefox Date: 15-02-2017 Software Link: https://www.mozilla.org/en-US/firefox/new/ Exploit Author: Originally Found by Google Project 0 teamBikash Dash Tested On:MAC OS x86 Website: http://vulnerableghost.com/ CVE: CVE-2012-5835...

[SECURITY] [DLA 819-2] mysql-5.5 version number correction

Package : mysql-5.5 Version : 5.5.54-0+deb7u2 CVE ID : not assigned yet Debian Bug : 854713 This is a correction of DLA 819-1 that mentioned that mysql-5.5 5.5.47-0+deb7u2 was corrected. The corrected package version was 5.5.54-0+deb7u2. For completeness the text from DLA 819-1 is available below...

lindasdekorogdesign.no XSS vulnerability

Open Bug Bounty ID: OBB-212186 Description| Value ---|--- Affected Website:| lindasdekorogdesign.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

AIX 7.2 TL 0 : bellmail (IV92241) (deprecated)

https://vulners.com/cve/CVE-2017-1093 https://vulners.com/cve/CVE-2017-1093 IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...