Ruby: Ruby 2.3.x and 2.2.x still bundle DoS vulnerable verision of libYAML

libYAML 0.1.6 and 0.1.5 has a DoS vulnerablitity known as CVE-2014-9130. Now Ruby 2.4.x bundles fixed version 0.1.7, but 2.3.x and 2.2.x still bundle 0.1.6. Note that I'm the maintainer of Ruby 2.3.x and 2.2.x. Therefore, this report is a kind of remainder...

[SECURITY] Fedora 25 Update: libtirpc-1.0.1-4.rc3.fc25

This package contains SunLib's implementation of transport-independent RPC TI-RPC documentation. This library forms a piece of the base of Open Network Computing ONC, and is derived directly from the Solaris 2.3 source. TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V...

CVE-2017-6025

A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A malicious user could overfl...

Vanilla Forums < 2.3 - Remote Code Execution

!/bin/bash / / / / / / / / / / / / / / / / / / // / / / /// / / / / // / // / // / / / / // / // , / / / ///, /,// // //,///||// // // Vanilla Forums = 2.3 Remote Code Execution RCE PoC Exploit 0day Core version no plugins, default config. CVE-2016-10033 RCE CVE-2016-10073 Header Injection...

CoDeSys Web Server Arbitrary File Upload Vulnerability

3S-Smart Software Solutions CODESYS is a suite of PLC programmable logic controller software programming tools from 3S-Smart Software Solutions, Germany. CODESYS Web Server is one of the web servers. A security vulnerability exists in CODESYS Web Server version 2.3 and earlier. An attacker can...

Joomla JE Quiz 2.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Quiz 2.3 - SQL Injection Google Dork: inurl:index.php?option=comjequizmanagement Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Quiz 2.3 - SQL Injection

Exploit Title: Joomla! Component JE Quiz 2.3 - SQL Injection Google Dork: inurl:index.php?option=comjequizmanagement Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/je-quiz-component/ Dem...

10-Strike Network File Search Buffer Overflow Vulnerability

10-Strike Network File Search is a network resource file finder. A buffer overflow vulnerability exists in Network File Search Pro version 2.3, which can be exploited by an attacker to execute arbitrary code in the context of the application, possibly resulting in a denial of service...

10-Strike Network File Search Pro 2.3 - Local Buffer Overflow (SEH)

10-Strike Network File Search Pro 2.3 - Local Buffer Overflow SEH !python Exploit title: 10-Strike Network File Search Pro 2.3 Registration code SEH exploit Date: 2016-12-10 Vendor homepage: https://www.10-strike.com/network-file-search/help/pro.shtml Download:...

shopify-scripts: Crash: A call to Symbol.new leads to a crash when inspecting the resulting object

Calling Symbol.new leads to a when inspect is called on that method probably even more methods. From my point of view the root cause is related to 185794 the underlying boxing model. Trying the same with Ruby 2.3 will lead to a NoMethodError: undefined method 'new' for Symbol:Class, which is...

ntop/nbox 2.3 < 2.5 - Multiple Vulnerabilities

E-DB Note: Source http://carnal0wnage.attackresearch.com/2016/08/got-any-rces.html The issues were found originally in nbox 2.3 and confirmed in nbox 2.5 To make things easier, I created a Vagrantfile with provisioning so you can have your own nbox appliance and test my findings or give it a shot...

Outline Designer - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-035

This module enables you to mass administer book outlines and perform common operations through one interface, improving the usability for the book module. The module doesn't sufficiently sanitize titles when presenting them on this interface. This vulnerability is mitigated by the fact that an...

Rough Auditing Tool for Security (RATS) 2.3 - Array Out of Block Crash

Exploit for linux platform in category dos / poc Exploit Title: RATS 2.3 Array Out of Block Crash Date: 29th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link:...

Rough Auditing Tool for Security (RATS) 2.3 - Crash (PoC)

Rough Auditing Tool for Security RATS 2.3 - Crash PoC Exploit Title: RATS 2.3 Crash POC Date: 25th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link: https://code.google.com/archive/p/rough-auditing-tool-for-security/downloads...

RATS 2.3 Crash Proof Of Concept

Exploit Title: RATS 2.3 Crash POC Date: 25th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link: https://code.google.com/archive/p/rough-auditing-tool-for-security/downloads Version: RATS 2.3 Tested on: Ubuntu 14.04 LTS CVE : 0 da...

pfSense Community Edition 2.2.6 - Multiple Vulnerabilities

Exploit for php platform in category web applications PfSense Community Edition Multiple Vulnerabilities Affected versions: PfSense Community Edition ' s...

KNOX 2.3 Clipboard Data Disclosure

Subject: CVE-2016-3996KNOX clipboard data disclosure KNOX 1.0 - KNOX 2.3 / Android Vulnerability Description ========================= The vulnerability allows disclosure of Clipboard data of Samsung KNOX 1.0 and 2.3 containers. On KNOX-enabled devices there exists a proprietary service called...

pfSense Firewall 2.2.6 - Services Cross-Site Request Forgery

pfSense Firewall 2.2.6 - Services Cross-Site Request Forgery Exploit Title: pfSense Firewall Stop NTPD service: Restart NTPD service: POC: input type="submit" value...

pfSense Firewall 2.2.6 - Services Cross-Site Request Forgery

Exploit for php platform in category web applications Exploit Title: pfSense Firewall Stop NTPD service: Restart NTPD service: POC: input type="hidden" na...

Fedora 23 : openvpn-2.3.10-1.fc23 (2016-e91ca003d4)

https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...