Microsoft Windows Kernel - win32k.sys Local Privilege Escalation (MS14-058)

Microsoft Windows Kernel - win32k.sys Local Privilege Escalation MS14-058 Sources: https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-lab-exploiting-cve-2014-4113.pdf https://github.com/sam-b/CVE-2014-4113 EDB Mirror:...

Satellite: stored XSS in user details fields (incomplete fix for CVE-2014-7811)

A cross-site scripting XSS flaw was found in how XML data was handled in Red Hat Satellite. A user able to use the XMLRPC API could exploit this flaw to perform XSS attacks against other Satellite users...

Play Footballl Worldcup 2014 - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Play Footballl Worldcup 2014 published at the 'play' market has multiple vulnerabilities...

World Soccer Games 2014 Cup - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application World Soccer Games 2014 Cup published at the 'play' market has multiple vulnerabilities...

Stickman Soccer 2014 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stickman Soccer 2014 published at the 'play' market has multiple vulnerabilities...

Pro Darts 2014 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pro Darts 2014 published at the 'play' market has multiple vulnerabilities...

Real Piano + Keyboard 2014 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Piano + Keyboard 2014 published at the 'play' market has multiple vulnerabilities...

Sky Force 2014 - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sky Force 2014 published at the 'play' market has multiple vulnerabilities...

DEER HUNTER 2014 - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application DEER HUNTER 2014 published at the 'play' market has multiple vulnerabilities...

WISO steuer:App 2014 - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application WISO steuer:App 2014 published at the 'play' market has multiple vulnerabilities...

Debian DSA-3537-1 : imlib2 - security update

Several vulnerabilities were discovered in imlib2, an image manipulation library. - CVE-2014-9762 A segmentation fault could occur when opening GIFs without a colormap. - CVE-2014-9763 Several divisions by zero, resulting in a program crash, could occur when handling PNM files. - CVE-2014-9764 A...

[SECURITY] [DSA 3537-1] imlib2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3537-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3537-1] imlib2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3537-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 31, 2016 https://www.debian.org/security/faq -...

DSA-3537-1 imlib2 - security update

Bulletin has no description...

CVE-2014-9769

pcrejitcompile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service stack memory corruption or possibly have unspecified other impact via a crafted string, as demonstrated by packets encountered by Suricata...

CVE-2014-9769

CVE-2014-9769 targets the PCRE library (PCRE 8.35) with a flaw in pcre_jit_compile.c where table jumps are not used correctly for nested alternatives. This can allow remote attackers to trigger a denial of service (stack memory corruption/segfault) via a crafted string observed in Suricata/Open R...

Cloud Metadata URL List

Landed the SSRF Cloud Metadata technique in a few different scenarios recently. If you havent seen the talk BHUSA 2014 - Bringing a Machete to the Amazon I recommend it. To make life a little easier created a living URL list for Metadata broken down by cloud. There are a few more than he discusse...

Cloud Metadata URL List

Landed the SSRF Cloud Metadata technique in a few different scenarios recently. If you haven't seen the talk BHUSA 2014 - Bringing a Machete to the Amazon I recommend it. To make life a little easier created a living URL list for Metadata broken down by cloud. There are a few more than he discuss...

Debian DSA-3530-1 : tomcat6 - security update

Multiple security vulnerabilities have been fixed in the Tomcat servlet and JSP engine, which may result on bypass of security manager restrictions, information disclosure, denial of service or session fixation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Slackware 14.1 / current : libevent (SSA:2016-085-01)

New libevent packages are available for Slackware 14.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-085-01. The text itself is copyright C...