77 matches found
WordPress Pods 2.7.9 Database Disclosure
Exploit Title : WordPress Pods Plugins 2.7.9 Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/11/2018 Vendor Homepage : + wordpress.org/plugins/pods/ pods.io +...
Directory Traversal And Remote Code Execution (RCE)
git-spindle is vulnerable to directory traversal or remote code execution attacks. The vulnerability exists because it does not perform any sanitization on repourl and reponame from GitHub API, allowing malicious operators of the GitHub server to trigger directory traversal or remote code executi...
CPython Man In The Middle Attack Vulnerability
CPython suffers from a man in the middle attack vulnerability via a crafted certificate. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
HP Data Protector A.09.00 - Arbitrary Command Execution
Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Data Protector Encrypted Communications Date: 26-05-2016 Exploit Author: Ian Lovering Vendor Homepage: http://www8.hp.com/uk/en/software-solutions/data-protector-backup-recovery-software/ Version: A.09.00 and...
CVE-2015-3274
Cross-site scripting XSS vulnerability in the usergetuserdetails function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to inject arbitrary web script or HTML by leveraging absence of an externalformattext call in ...
Python 2.7 check_multiply_size() Integer Overflow Vulnerability
Several functions within the imageop module are vulnerable to exploitable buffer overflows due to unsafe arithmetic in checkmultiplysize. The problem exists because the check to confirm that size == product / y / x does not take remainders into account. Title: Python 2.7 checkmultiplysize Integer...
Fedora 21 : moodle-2.7.9-1.fc21 (2015-14996)
moodle-2.7.9-1.fc21 - 2.7.9. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2015:1344-1)
This update to python 2.7.9 fixes the following issues : - python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for aarch64 From the version update to 2.7.9 : - contains full backport of ssl module from Python 3.4 PEP466 - HTTPS certificate validation enabled by default PEP476 - SSLv3...
SUSE-SU-2015:1344-1 Security update for python
This update to python 2.7.9 fixes the following issues: python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for aarch64 From the version update to 2.7.9: contains full backport of ssl module from Python 3.4 PEP466 HTTPS certificate validation enabled by default PEP476 SSLv3 disabled b...
pidgin security update
2.7.9-10.el64.1 - Fix spec file for disttag 2.7.9-10.el6 - Add patch for CVE-2013-0274 RH bug 910653. 2.7.9-9.el6 - Add patch for CVE-2013-0273 RH bug 910653. 2.7.9-8.el6 - Add patch for CVE-2013-0272 RH bug 910653. 2.7.9-7.el6 - Add patch for CVE-2011-2485 RH bug 837562. 2.7.9-6.el6 - Add patch...
Scientific Linux Security Update : pidgin on SL6.x i386/x86_64
Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Multiple NULL pointer dereference flaws were found in the way the Pidgin Yahoo! Messenger Protocol plug-in handled malformed YMSG packets. A remote attacker could us...
pidgin security and bug fix update
2.7.9-3.el6 - Add patch for RH bug 684685 zero-out crypto keys before freeing. 2.7.9-2.el6 - Add patch for CVE-2011-1091 RH bug 683031. 2.7.9-1.el6 - Update to 2.7.9 RH bug 616917. - Remove patches now included upstream: pidgin-2.6.6-clientLogin-proxy-fix.patch...
RHEL 6 : pidgin (RHSA-2011:0616)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0616 advisory. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Multiple...
Null pointer dereference
directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...
Security fix for the ALT Linux 5 package pidgin-mini version 2.7.9-alt1
Dec. 28, 2010 Slava Semushin 2.7.9-alt1 - Updated to 2.7.9 + CVE-2010-4528: crash when receiving short packets related to P2Pv2 messages...
