openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2010:1042-1)

when using 'SVNPathAuthz shortcircuit' moddavsvn didn't properly enforce access restrictions CVE-2010-3315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsvnauthgnomekeyring-1-0-3423. The...

openSUSE Security Update : libthunarx-2-0 (openSUSE-SU-2011:0518-1)

Due to a format string error thunar could crash when copy&pasting a file name with format characters CVE-2011-1588. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libthunarx-2-0-4590. The tex...

openSUSE Security Update : xen-201107 (openSUSE-SU-2011:0941-1)

Security / Collective Update for Xen Xen : - bnc702025 - VUL-0: xen: VT-d PCI passthrough MSI trap injection CVE-2011-1898 - bnc703924 - update block-npiv scripts to support BFA HBA - bnc689954 - L3: Live migrations fail when guest crashes: domaincrashsync called from entry.S - bnc693472 - Bridge...

openSUSE Security Update : xen (openSUSE-SU-2013:1404-1)

XEN was updated to 4.2.2, fixing lots of bugs and several security issues. Various upstream patches were also merged into this version by our developers. Detailed buglist : - bnc824676 - Failed to setup devices for vm instance when start multiple vms simultaneously - bnc817799 - sles9sp4 guest...

Linux privilege escalation

ring 0 code execution via futex syscall...

Debian DSA-2949-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation : - CVE-2014-3144/ CVE-2014-3145 A local user can cause a denial of service system crash via crafted BPF instructions. - CVE-2014-3153 Pinkie Pie discovered an issue in th...

Debian Security Advisory DSA 2949-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation: CVE-2014-3144 / CVE-2014-3145 A local user can cause a denial of service system crash via crafted BPF instructions. CVE-2014-3153 Pinkie Pie discovered an issue in the...

Wordpress Plugin CopySafe Web Protection Shell Upload (0day) Vulnerability

Exploit for php platform in category web applications Title : Wordpress Plugin CopySafe Web Protection Shell Upload Vulnerability Author : Aloulou Date : 01/06/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : wordpress.org Google Dork :...

[SECURITY] Fedora 19 Update: 0ad-0.0.15-4.fc19

0 A.D. pronounced "zero ey-dee" is a free, open-source, cross-platform real-time strategy RTS game of ancient warfare. In short, it is a historically-based war/economy game that allows players to relive or rewrite the history of Western civilizations, focusing on the years between 500 B.C. and 50...

xnews 3-0-0 Cross Site Scripting

=========================================================== xnews3-0-0 XSS Vulnerability ----------------------------------------------------------- foun by :kurd-team , Exploiter group : kurdish hackers team contact : [email protected] site : kurdsystem.com...

Cisco Adaptive Security Appliance 远程权限提升漏洞

Bugtraq ID:66747 CVE ID:CVE-2014-2126 Cisco ASA 5500系列自适应安全设备是用于提供安全和VPN服务的模块化平台，可提供防火墙、IPS、anti-X和VPN服务。 Cisco Adaptive Security Appliance ASA Software 8.25.47之前版本、8.47.5之前版本、8.71.11之前版本、9.03.10之前版本、9.13.4之前版本在实现上存在安全漏洞，这可使经过身份验证的远程用户通过Level-0 ASDM访问，利用此漏洞获取权限。 0 Cisco Adaptive Security Applianc...

WinRAR Filename Spoofing Exploit

This Metasploit module abuses a filename spoofing vulnerability in WinRAR. The vulnerability exists when opening ZIP files. The file names showed in WinRAR when opening a ZIP file come from the central directory, but the file names used to extract and open contents come from the Local File Header...

DSA-2888-1 ruby-actionpack-3.2 - security update

Bulletin has no description...

Microsoft Office memory corruption

Microsoft Word RTF parsing 0-day vulnerability is exploited in-the-wild...

QNX 6.5.0 x86 io-graphics - Local root Exploit

Exploit for QNX platform in category local exploits / QNX 6.5.0 x86 io-graphics local root exploit by cenobyte 2013 - vulnerability description: Setuid root /usr/photon/bin/io-graphics on QNX is prone to a buffer overflow. The vulnerability is due to insufficent bounds checking of the PHOTON2HOME...

QNX 6.5.0 x86 phfont - Local root Exploit

Exploit for QNX platform in category local exploits / QNX 6.5.0 x86 phfont local root exploit by cenobyte 2013 - vulnerability description: Setuid root /usr/photon/bin/phfont on QNX is prone to a buffer overflow. The vulnerability is due to insufficent bounds checking of the PHOTONHOME environmen...

XDA Forum hackers again proof Sony Xperia Z2 UI-bug warning-the black bar safety net

Recently a senior XDA developer Forum member in the online release of more than one Xperia Z2 real machine picture, and shows the phone running Android 4.3 system, using the new UI, the phone use is very unstable, the UI has been crashing. Today, the XDA member latest release of the Xperia Z2...

PHP 'open_basedir' Security Bypass Vulnerability

PHP is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

kernel: security and bugfix update (important)

The Linux kernel was updated to fix various bugs and security issues: - mm/page-writeback.c: do not count anon pages as dirtyable memory reclaim stalls. - mm/page-writeback.c: fix dirtybalancereserve subtraction from dirtyable memory reclaim stalls. - compatsysrecvmmsg X32 fix bnc860993...

SuSE 11.3 Security Update : pixman (SAT Patch Number 8697)

This update fixes the following security issue with pixman : - Integer underflow when handling trapezoids. bnc853824, CVE-2013-6425 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...