CVE-2016-4296

This CVE (CVE-2016-4296) affects Hancom Hangul HCell components (HCellApp, HCellBook, CSSValFormat) used in Hangul Office. The root cause is in CSSValFormat::CheckUnderbar: it seeks the last underscore in a Unicode string and rewrites that underscore plus a null terminator, which when the string ...

CVE-2016-4291

CVE-2016-4291 affects Hancom Hangul Office 2014 VP (Hangul HShow). A structure field in an HShow document (.hpt) can cause an integer overflow during a size calculation, leading to an undersized heap allocation. Subsequent reads write beyond the allocated buffer, enabling code execution in the Ha...

Palo Alto PAN-OS DoS Vulnerability (PAN-SA-2016-0027)

Palo Alto PAN-OS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-9911

ICU vulnerability CVE-2014-9911 affects the ures_getByKeyWithFallback function in common/uresbund.cpp of ICU, with the stack-based buffer overflow possible before version 54.1. A crafted uloc_getDisplayName call could allow a remote attacker to cause a denial of service or potentially other impac...

CVE-2014-9912

The CVE-2014-9912 entry affects PHP’s get_icu_disp_value_src_php in ext/intl/locale/locale_methods.c. The issue arises when calling locale_get_display_name with a long first argument, failing to properly restrict calls to ICU’s uresbund.cpp, which can cause a denial of service via a buffer overfl...

KLA10931 Denial of service vulnerability in PHP

An unspecified vulnerability was found in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14. By exploiting this vulnerability malicious users can cause a denial of service. Other unspecified impacts are also possible. This vulnerability can be exploited remotely via a...

CVE-2014-9911

Stack-based buffer overflow in the uresgetByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode ICU before 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted ulocgetDisplayName call...

GLSA-201612-49 : mod_wsgi: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201612-49 modwsgi: Privilege escalation modwsgi, when creating a daemon process group, does not properly handle dropping group privileges. Impact : Context-dependent attackers could escalate privileges due to the improper handling...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2016:3301-1)

The tiff library and tools were updated to version 4.0.7 fixing various bug and security issues. - CVE-2014-8127: out-of-bounds read with malformed TIFF image in multiple tools bnc914890 - CVE-2016-9297: tifdirread.c read outside buffer in TIFFPrintField bnc1010161 - CVE-2016-3658: Illegal read i...

GLSA-201701-09 : Xdg-Utils: Command injection

The remote host is affected by the vulnerability described in GLSA-201701-09 Xdg-Utils: Command injection An eval injection vulnerability was discovered in Xdg-Utils. Impact : A context-dependent attacker could execute arbitrary code via the URL argument to xdg-open. Workaround : There is no know...

Freepbx < 2.11.1.5 - Remote Code Execution

Exploit Title: Freepbx coockie recordings injection Google Dork: Ask Santa Date: 23/12/2016 Exploit Author: inj3ctor3 Vendor Homepage: https://www.freepbx.org/ Software Link: ISO LINKS IN SITE https://www.freepbx.org/ Version: ALL && unpatched/ Trixbox/freepbx/elastix/pbxinflash/ Tested on: Cento...

Freepbx 2.11.1.5 - Remote Code Execution

Freepbx 2.11.1.5 - Remote Code Execution Exploit Title: Freepbx coockie recordings injection Google Dork: Ask Santa Date: 23/12/2016 Exploit Author: inj3ctor3 Vendor Homepage: https://www.freepbx.org/ Software Link: ISO LINKS IN SITE https://www.freepbx.org/ Version: ALL && unpatched/...

CVE-2014-4138

creationtimestamp| type| source ---|---|--- 2016-12-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40960...

CVE-2014-1785

creationtimestamp| type| source ---|---|--- 2016-12-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40946...

OpenSSL SSL/TLS MITM Vulnerability (CVE-2014-0224)

OpenSSL is an open-source SSL implementation, used to implement the network communication of high-strength encryption, it is now widely used in various network applications. OpenSSL 0.9.8 za, 1.0.0 m, 1.0.1 h prior version, does not properly handle ChangeCipherSpec messages, which allows the midd...

RSSMON / BEAM (Red Star OS 3.0) Shellshock

!/usr/bin/env python RedStar OS 3.0 Server BEAM & RSSMON shellshock exploit ======================================================== BEAM & RSSMON are Webmin based configuration utilities that ship with RSS server 3.0. These packages are the recommended GUI configuration components and listen on ...

OLX: olx.ph is vulnerable to POODLE attack

https://www.olx.ph supports SSLv3 and hence is vulnerable to POODLE attack, which is a kind of Man in the middle attack. This vulnerability was discovered in 2014 by GoogleMore Information below: https://security.googleblog.com/2014/10/this-poodle-bites-exploiting-ssl-30.html...

RedStar 3.0 Server - 'Shellshock' 'BEAM' / 'RSSMON' Command Injection

!/usr/bin/env python RedStar OS 3.0 Server BEAM & RSSMON shellshock exploit ======================================================== BEAM & RSSMON are Webmin based configuration utilities that ship with RSS server 3.0. These packages are the recommended GUI configuration components and listen on ...

RedStar 3.0 Server - Shellshock BEAM RSSMON Command Injection

RedStar 3.0 Server - Shellshock BEAM RSSMON Command Injection !/usr/bin/env python RedStar OS 3.0 Server BEAM & RSSMON shellshock exploit ======================================================== BEAM & RSSMON are Webmin based configuration utilities that ship with RSS server 3.0. These packages a...

SUSE SLED12 / SLES12 Security Update : pcre (SUSE-SU-2016:3161-1)

This update for pcre to version 8.39 bsc972127 fixes several issues. If you use pcre extensively please be aware that this is an update to a new version. Please make sure that your software works with the updated version. This version fixes a number of vulnerabilities that affect pcre and...