Input validation

Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks...

CVE-2018-18903

Vanilla 2.6.x before 2.6.4 allows remote code execution...

Remote code execution

Vanilla 2.6.x before 2.6.4 allows remote code execution...

CVE-2018-18903

Vanilla 2.6.x before 2.6.4 allows remote code execution...

CVE-2018-18903

The CVE-2018-18903 issue affects Vanilla Forums (Vanilla) in the domGetImages function of the ImportController, where unserialize via a crafted phar archive enables remote code execution without authentication. This is tied to Vanilla Forums prior to 2.6.4. Affected product: Vanilla Forums; vulne...

CVE-2018-18903

Vanilla 2.6.x before 2.6.4 allows remote code execution...

[SECURITY] Fedora 29 Update: python26-2.6.9-17.fc29

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

[SECURITY] Fedora 28 Update: python26-2.6.9-17.fc28

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

[SECURITY] Fedora 27 Update: python26-2.6.9-17.fc27

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

Wireshark 2.6.x < 2.6.4 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.6.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.4 advisory. - In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed i...

UBUNTU-CVE-2018-18226

In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach...

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

cve-2018-14634 This is a exploit published for researchers di...

CVE-2018-1741

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 does not properly limit the number or frequency of interaction which could be used to cause a denial of service, compromise program logic or other consequences. IBM X-Force ID: 148420...

CVE-2018-1741

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 does not properly limit the number or frequency of interaction which could be used to cause a denial of service, compromise program logic or other consequences. IBM X-Force ID: 148420...

Security Bulletin: IBM Security Key Lifecycle Manager is vulnerable to Hazardous Input Validation ( CVE-2018-1749)

Summary IBM Security Key Lifecycle Manager uses incomplete blocklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. Vulnerability Details CVEID: CVE-2018-1749 DESCRIPTION: IBM Tivoli Key Lifecycle Manager...

Linux Kernel 2.6.x / 3.10.x / 4.14.x (x64) - Mutagen Astronomy Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits / EDB-Note: Systems with less than 32GB of RAM are unlikely to be affected by this issue, due to memory demands during exploitation. EDB Note: poc-exploit.c / / poc-exploit.c for CVE-2018-14634 Copyright C 2018 Qualys, Inc. This program is fre...

Linux Kernel 2.6.x / 3.10.x / 4.14.x (RedHat / Debian / CentOS) (x64) - 'Mutagen Astronomy' Local Privilege Escalation

/ EDB-Note: Systems with less than 32GB of RAM are unlikely to be affected by this issue, due to memory demands during exploitation. EDB Note: poc-exploit.c / / poc-exploit.c for CVE-2018-14634 Copyright C 2018 Qualys, Inc. This program is free software: you can redistribute it and/or modify it...

UBUNTU-CVE-2018-14634

An integer overflow flaw was found in the Linux kernel's createelftables function. An unprivileged local user with access to SUID or otherwise privileged binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable...

Free MP3 CD Ripper 2.6 Local Buffer Overflow

Exploit Title: Free MP3 CD Ripper 2.6 - '.wma' Buffer Overflow SEH Author: Gionathan "John" Reale Discovey Date: 2018-09-13 Software Link: http://www.commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper Tested on OS: Windows 7 32bit Tested Version: 2.6 Steps to Reproduce: Run the...

Parrot Security 4.2.2 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Updated kernel and core packages Parrot 4.2 is powered by the latestLinux 4.18 debianized kernel with all the usual wireless patches. A new version of the Debian-Installer now powers our netinstall images and the standard Parrot images. Firmware packages were updated to add broader hardware...