Disable TELNET! Cisco finds 0-Day in CIA Dump affecting over 300 Network Switch Models

Cisco is warning of a new critical zero-day IOS / IOS XE vulnerability that affects more than 300 of its switch models. The company identified this highest level of vulnerability in its product while analyzing "Vault 7" — a roughly 8,761 documents and files leaked by Wikileaks last week, claiming...

[SECURITY] [DLA 856-1] tzdata new upstream version

Package : tzdata Version : 2017a-0+deb7u1 This update includes the changes in tzdata 2017a. Notable changes are: - Mongolia no longer observes DST. - Magallanes region diverges from Santiago starting 2017-05-13, the America/PuntaArenas zone has been added. For Debian 7 "Wheezy", these problems ha...

CVE-2017-6210

The vrenddecodereset function in vrenddecode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service NULL pointer dereference and QEMU process crash by destroying context 0 zero...

CVE-2017-6210

The vrenddecodereset function in vrenddecode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service NULL pointer dereference and QEMU process crash by destroying context 0 zero...

http-vuln-cve2017-5638 NSE Script

Detects whether the specified URL is vulnerable to the Apache Struts Remote Code Execution Vulnerability CVE-2017-5638. Script Arguments http-vuln-cve2017-5638.path The URL path to request. The default path is "/". http-vuln-cve2017-5638.method The HTTP method for the request. The default method ...

Out-of-bounds

An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse in libytnef...

AIX 7.2 TL 0 : bind (IV93403) (deprecated)

https://vulners.com/cve/CVE-2016-9131 https://vulners.com/cve/CVE-2016-9131 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses during recursion. By sending a malformed response to a RTYPE ANY query, a remote attacker could exploit this vulnerability to...

SMB denial of service vulnerability in the web application on the use-vulnerability warning-the black bar safety net

CVE-2017-0016 SMB 0 day vulnerability can lead to Windows System denial of service, the present article is mainly to explain the vulnerability in a web application use. 2017 2 2 June, security researchers announced a exists in Microsoft Windows SMB in the 0 day Vulnerability, CVE－2017-0016, the...

[SECURITY] Fedora 24 Update: mujs-0-8.20170124git4006739.fc24

MuJS is a lightweight Javascript interpreter designed for embedding in other software to extend them with scripting capabilities...

CVE-2017-3844

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are...

Mozilla Firefox WebGL Proof Of Concept

Exploit Title: Integer overflow happens WebGL system in Mozila Firefox Date: 15-02-2017 Software Link: https://www.mozilla.org/en-US/firefox/new/ Exploit Author: Originally Found by Google Project 0 teamBikash Dash Tested On:MAC OS x86 Website: http://vulnerableghost.com/ CVE: CVE-2012-5835...

[SECURITY] [DLA 819-2] mysql-5.5 version number correction

Package : mysql-5.5 Version : 5.5.54-0+deb7u2 CVE ID : not assigned yet Debian Bug : 854713 This is a correction of DLA 819-1 that mentioned that mysql-5.5 5.5.47-0+deb7u2 was corrected. The corrected package version was 5.5.54-0+deb7u2. For completeness the text from DLA 819-1 is available below...

lindasdekorogdesign.no XSS vulnerability

Open Bug Bounty ID: OBB-212186 Description| Value ---|--- Affected Website:| lindasdekorogdesign.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

AIX 7.2 TL 0 : bellmail (IV92241) (deprecated)

https://vulners.com/cve/CVE-2017-1093 https://vulners.com/cve/CVE-2017-1093 IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

Linux - Multi/Dual mode execve("/bin/sh", NULL, 0) Shellcode (37 bytes)

Linux - Multi/Dual mode execve"/bin/sh", NULL, 0 Shellcode 37 bytes. Shellcode exploit for Linux platform / Copyright © 2017 Odzhan. All Rights Reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:...

Null pointer dereference

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and crash by setting the tags TIFFSETGETC16ASCII or TIFFSETGETC32ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix f...

CVE-2016-9448

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and crash by setting the tags TIFFSETGETC16ASCII or TIFFSETGETC32ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix f...

ImageMagick Mat File Multiple Denial of Service Vulnerabilities - Mac OS X

ImageMagick is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to initiate connections to arbitrary hosts. More Information: CSCvc31635. Known Affected Releases: 10.69. Known Fixed Releases: 11.00...

Tarantool Denial of Service Vulnerability

Tarantool is an embedded NoSQL database management system written in Lua that integrates web programming with Node.js and data persistence with Redis. A denial of service vulnerability exists in Tarantool version 1.7.2-0. An attacker can exploit this vulnerability to cause a denial of service...