CVE-2014-9755

The CVE concerns Viprinet MultichannelVPN Router 300 hardware VPN client versions 2013070830/2013080900. The root cause is failure to validate the remote VPN endpoint identity by checking the endpoint’s SSL key before initiating the exchange, enabling a replay attack. Affected component: hardware...

CVE-2014-2045

CVE-2014-2045 affects Viprinet Multichannel VPN Router 300. The issue is multiple cross‑site scripting (XSS) vulnerabilities in both the device’s old and new web interfaces, exploitable via crafted usernames or other parameters (e.g., hostname, config inspect, atcommands, ping tool). Exploitation...

openSUSE Security Update : squid (openSUSE-2017-127)

This update for squid fixes the following issues : - CVE-2016-10002: Fixed incorrect processing of responses to If-None-Modified HTTP conditional requests. This allowed responses containing private data to clients it should not have reached bsc1016168 - CVE-2014-9749: Prevent nonce replay in Dige...

CVE-2014-9913

Buffer overflow in the listfiles function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via vectors related to the compression method...

AZL-35335 CVE-2014-9913 affecting package unzip for versions less than 6.0-20

Buffer overflow in the listfiles function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via vectors related to the compression method...

CVE-2014-9913

CVE-2014-9913 refers to a buffer overflow in Info-Zip UnZip 6.0’s list_files function (list.c) that can crash the application via ZIP compression-method-related inputs. Connected records indicate unzip packages in various distros with patches or newer versions (e.g., Mariner entries noting patche...

CVE-2014-9909

The CVE-2014-9909 entry describes an elevation of privilege vulnerability in the Broadcom Wi‑Fi driver for Android, where a local malicious application could execute arbitrary code in the kernel context. The issue is considered High impact because it requires compromising a privileged process fir...

CVE-2014-9910

CVE-2014-9910 is a local elevation-of-privilege in the Broadcom Wi‑Fi driver on Android that could allow a malicious local app to run code in kernel context. The issue requires compromising a privileged process and affects Android, with no specific patch version or remediation provided in the sup...

openSUSE Security Update : encfs (openSUSE-2017-82)

This update for encfs fixes the following issues : - A new option --require-macs was added to address CVE-2014-3462 boo878257 This will now trigger a warning if MAC headers were disabled via configuration. In addition, encfs was updated to 1.8.1 including all upstream improvements and fixes...

Debian DLA-781-2 : asterisk regression update

Brad Barnett found that the recent security update of Asterisk could cause immediate SIP termination due to an incomplete fix for CVE-2014-2287. For Debian 7 'Wheezy', these problems have been fixed in version 1:1.8.13.1dfsg1-3+deb7u6. We recommend that you upgrade your asterisk packages. NOTE:...

HP Helion Eucalyptus Multiple Vulnerabilities

HP Helion Eucalyptus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eucalyptus:eucalyptus"...

SUSE SLES11 Security Update : squid3 (SUSE-SU-2017:0110-1)

This update for squid3 fixes the following issues : - CVE-2016-10002: Fixed incorrect processing of responses to If-None-Modified HTTP conditional requests. This allowed responses containing private data to clients it should not have reached bsc1016168 - CVE-2014-9749: Prevent nonce replay in...

Freepbx 2.11.1.5 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: Freepbx coockie recordings injection Google Dork: Ask Santa Date: 23/12/2016 Exploit Author: inj3ctor3 Vendor Homepage: https://www.freepbx.org/ Software Link: ISO LINKS IN SITE https://www.freepbx.org/ Version: ALL && unpatched...

FreePBX Remote Code Execution

Exploit Title: Freepbx coockie recordings injection Google Dork: Ask Santa Date: 23/12/2016 Exploit Author: inj3ctor3 Vendor Homepage: https://www.freepbx.org/ Software Link: ISO LINKS IN SITE https://www.freepbx.org/ Version: ALL && unpatched/ Trixbox/freepbx/elastix/pbxinflash/ Tested on: Cento...

MS14-044: Description of the security update for SQL Server 2008 SP3 (GDR): August 12, 2014

MS14-044: Description of the security update for SQL Server 2008 SP3 GDR: August 12, 2014 INTRODUCTION Microsoft has released security bulletin MS14-044. To learn more about this security bulletin: Home users: https://www.microsoft.com/security/pc-security/updates.aspxSkip the details: Download t...

MS15-058: Description of the security update for SQL Server 2014 GDR: July 14, 2015

MS15-058: Description of the security update for SQL Server 2014 GDR: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed to execute a virtual functio...

MS15-058: Description of the nonsecurity update for SQL Server 2014 Service Pack 1 GDR: July 14, 2015

MS15-058: Description of the nonsecurity update for SQL Server 2014 Service Pack 1 GDR: July 14, 2015 Summary Microsoft has released security bulletin MS15-058. However, Microsoft SQL Server 2014 Service Pack 1 is not affected by the vulnerabilities that are discussed in this bulletin. But, it is...

MS14-053: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: September 9, 2014

MS14-053: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: September 9, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET...

Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update rollup: January 2014

Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update rollup: January 2014 Important When you install this update 2911106 from Windows Update, update 2914218 are included in the installation. Summary This article describes the update rollup for Windows RT 8.1, Windows 8.1, and Windows...

Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update rollup: February 2014

Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update rollup: February 2014 Summary This article describes the update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 that is dated February 2014. This update rollup package includes performance and reliability improvemen...