Node-RED-Dashboard Path Traversal Vulnerability

A path traversal vulnerability exists in Node-RED-Dashboard before 2.26.2, which can be exploited by an attacker to traverse paths...

GHSA-JH5W-6964-X5CF chromedriver Downloads Resources over HTTP

Affected versions of chromedriver insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This may result in arbitrary code execution if an attacker intercepts and modifies the downloaded binary fil...

GNU binutils 2.26.1 Integer Overflow

Exploit Title: Objdump - Integer Overflow Crash POC Date: 12.02.2018 Exploit Author: r4xis Tested Version: 2.26.1 Vuln Version: \nint mainprintf"HelloWorld!\n"; return 0;" f = open"helloWorld.c", 'w' f.writehello f.close os.system"gcc -c helloWorld.c -o test" file test test: ELF 32-bit LSB...

[SECURITY] Fedora 25 Update: php-horde-Horde-Core-2.26.1-1.fc25

These classes provide the core functionality of the Horde Application Framework...

openSUSE Security Update : seamonkey (openSUSE-SU-2014:0855-1)

seamonkey was updated to version 2.26.1 to fix nine security issues. These security issues were fixed : - Miscellaneous memory safety hazards CVE-2014-1533/CVE-2014-1534 - Use-after-free and out of bounds issues found using Address Sanitizer CVE-2014-1536/CVE-2014-1537/CVE-2014-1538 -...

PT-2012-1129 · Gnome +2 · Gdk-Pixbuf +2

Name of the Vulnerable Software and Affected Versions: gdk-pixbuf versions prior to 2.26.1 Description: The issue is related to multiple integer overflows in the read bitmap file data function in io-xbm.c, which can be triggered by a negative height or width in an XBM file. This can cause a...