net2ftp 1.0 Cross Site Scripting

Summary Subject: net2ftp XSS in "command" and "urlwithpw" parameters Versions vulnerable: ALL Tested on latest, version 1.0 Category: 0-day Impact: Medium Description of the product net2ftp is a web based FTP client http://www.net2ftp.com/index.php . It can be used as a standalone version and als...

Debian DLA-581-1 : libreoffice security update

Aleksandar Nikolic discovered that missing input sanitising in the RTF parser in Libreoffice may result in the execution of arbitrary code if a malformed documented is opened. For Debian 7 'Wheezy', these problems have been fixed in version 1:3.5.4+dfsg2-0+deb7u7. We recommend that you upgrade yo...

Debian DSA-3632-1 : mariadb-10.0 - security update

Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.26. Please see the MariaDB 10.0 Release Notes for further details : - https://mariadb.com/kb/en/mariadb/mariadb-10026-release- notes/...

CVE-2016-4974

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...

CVE-2016-4974

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...

PT-2016-6203

Name of the Vulnerable Software and Affected Versions Apache Qpid AMQP 0-x JMS client versions prior to 6.0.4 Apache Qpid JMS AMQP 1.0 versions prior to 0.10.0 Description The issue allows remote authenticated users with permission to send messages to deserialize arbitrary objects and execute...

GE Proficy HMI/SCADA CIMPLICITY 8.2 - Privilege Escalation

Exploit for windows platform in category local exploits / Exploit Title: GE Proficy HMI/SCADA CIMPLICITY 8.2 Local Privilege Escalation Exploit0 day Vulnerability Discovery and Exploit Author: Zhou Yu Email: Version: 8.2 Tested on: Windows 7 SP1 X32 CVE : None Vulnerability Description:...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the libstdc++6-0-dbg package of the Debian GNU/Linux operating system may lead to a violation of the integrity of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the libstdc++6-0 package of the Debian GNU/Linux operating system may lead to a violation of the integrity of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the libstdc++6-0-dev package of the Debian GNU/Linux operating system may lead to a violation of the integrity of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the libstdc++6-0-pic package of the Debian GNU/Linux operating system may lead to a violation of the integrity of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Local Compromise

The multiple vulnerabilities in the libgtk2.0-0-dbg package of the Debian GNU/Linux operating system can be exploited, leading to a violation of the accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

ImageMagick 7.x < 7.0.2-0 ReadSUNImage() Function SUN Image Handling DoS

The remote Windows host has a version of ImageMagick installed that is 7.x prior to 7.0.2-0. It is, therefore, affected by a denial of service vulnerability due to a flaw in the ReadSUNImage function in sun.c that is triggered during the handling of malformed SUN images. An unauthenticated, remot...

PKAV found Struts2 latest remote command execution vulnerability S2-0 3 7-the vulnerability warning-the black bar safety net

0x00 Preface Just after children's Day back found that struts2 shows the S033, so put down the hands of the Lollipop quickly analyze. ! 0x01 S2-0 3 3 vulnerability review First recall S033 According to the official description ! Obviously there are two key points: the first is the REST Plugin,the...

Cloud computing a core component of QEMU even explosion 1 0 pieces of high-risk vulnerabilities-vulnerability warning-the black bar safety net

Since 5 month so far,as cloud computing is an important underlying component of QEMU has been a continuous burst of 1 0 pieces of high-risk vulnerabilities,from the official website of the vulnerability Description,This 1 0 piece vulnerability, respectively, will cause comprises a“virtual machine...

Debian Security Advisory DSA 3595-1 (mariadb-10.0 - security update)

Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.25. Please see the MariaDB 10.0 Release Notes for further details: https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/...

CVE-2016-4564

The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the next token, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +20 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=6.0.2)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =1.0.0, =0.1, =0.1, =0.24, =0.24, =6.0.2 - org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-8-to-0-10 0.24 and more Source cves: CVE-2016-4432 Source advisory: MEND:CVE-2016-4432...

CVE-2016-4432

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...

Symantec/Norton anti-virus engine remote Heap/Pool memory corruption vulnerability analysis CVE-2 0 1 6-2 2 0 8-a vulnerability warning-the black bar safety net

! Recently, Symantec and Norton products using the core anti-virus engine was traced to the presence of high-risk vulnerabilities. It is in the parsing by aspack early version of the packaged executable file will occur when the buffer overflow, leading to memory corruption, Windows systems blue...