SUSE SLES11 Security Update : augeas (SUSE-SU-2018:0653-1)

This update for augeas fixes the following issues: Security issues fixed : - CVE-2017-7555: Fix a memory corruption bug could have lead to arbitrary code execution by passing crafted strings that would be mis-handled by parsename bsc1054171. - CVE-2014-8119: Fix improper handling of escaped strin...

Solaris 10 (sparc) : 147673-08

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Java Web Console. The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can...

Solaris 10 (x86) : 126120-02

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE - Power Management Utility. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in...

Solaris 10 (x86) : 150401-13

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: CPU performance counters CPC drivers. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability c...

Solaris 10 (sparc) : 150383-06

SunOS 5.10: wanboot patch. Date this patch was last updated by Sun : Nov/03/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 125359-19

NSSNSPRJSS 3.16 Solarisx86: NSPR 4.10.4 / NSS 3.16 / JSS 4.3.2. Date this patch was last updated by Sun : Nov/15/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2014-6617

The CVE-2014-6617 entry applies to Softing FG-100 PB PROFIBUS firmware FG-x00-PB_V2.02.0.00, where a hardcoded root password enables TELNET access to obtain admin rights. Public documents (NVD entry and Compass Security advisory) confirm a backdoor account exists by default, with vendor notes ind...

CVE-2014-2592

The CVE-2014-2592 entry concerns Aruba Web Management portal with an unrestricted file upload vulnerability that could allow remote attackers to execute arbitrary code by uploading a file with an executable extension. The NVD entry confirms a high-severity issue (CVSS v2/9.8 in v3) with network a...

CVE-2014-4861

CVE-2014-4861 affects Thycotic Secret Server’s Remote Desktop Launcher, where a temporary file containing an encrypted password is not properly cleaned up after a session ends. This could expose credentials if the file persists. Affected: Secret Server prior to 8.6.000010. Root cause: inadequate ...

CVE-2014-7272

Simple Desktop Display Manager SDDM before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance exploitation requires the user to win a race condition in the...

CVE-2014-7272

Simple Desktop Display Manager SDDM before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance exploitation requires the user to win a race condition in the...

CVE-2014-7271

Simple Desktop Display Manager SDDM before 0.10.0 allows local users to log in as user "sddm" without authentication...

CVE-2014-7271

Simple Desktop Display Manager SDDM before 0.10.0 allows local users to log in as user "sddm" without authentication...

CVE-2014-7272

CVE-2014-7272 affects Simple Desktop Display Manager (SDDM) prior to 0.10.0. The vulnerability arises when code running as root writes in a user’s home directory and a race condition in the ~/.Xauthority chown case can be exploited by a user who created links in advance. This can allow local user...

CVE-2014-7271

CVE-2014-7271 affects Simple Desktop Display Manager (SDDM). It describes an authentication flaw where versions prior to 0.10.0 allow local users to log in as the user "sddm" without authentication. Impact is local access and credential-free logins for that account. Mitigation: upgrade to SDDM 0....

CVE-2014-8780

Cross-site scripting XSS vulnerability in Jease 2.11 allows remote authenticated users to inject arbitrary web script or HTML via a content section note...

CVE-2014-8780

CVE-2014-8780 describes a cross-site scripting (XSS) vulnerability in Jease 2.11. The issue allows remote authenticated users to inject arbitrary web script or HTML via the content section note, with the attack vector involving the Create module’s content field and persistent scripting in the bro...

VulnCheck KEV: CVE-2014-6278

GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment...

Linux Kernel - BadIRET Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits CVE-2014-9322 PoC for Linux kernel CVE-2014-9322 a.k.a BadIRET proof of concept for Linux kernel. This PoC uses only syscalls not any libraries, like pthread. Threads are implemented using raw Linux syscalls. Raw Linux Threads via System Calls...

WebKitGTK 2.1.2 (Ubuntu 14.04) - Heap based Buffer Overflow Exploit

Exploit for linux platform in category local exploits CVE-2014-1303 PoC for Linux CVE-2014-1303 WebKit Heap based BOF proof of concept for Linux. This repository demonstrates the WebKit heap based buffer overflow vulnerability CVE-2014-1303 on Linux. NOTE: Original exploit is written for Mac OS X...