Debian: Security Advisory (DLA-1853-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1853-1] libspring-java security update

Package : libspring-java Version : 3.0.6.RELEASE-17+deb8u1 CVE ID : CVE-2014-3578 CVE-2014-3625 CVE-2015-3192 CVE-2015-5211 CVE-2016-9878 Debian Bug : 760733 769698 796137 849167 Vulnerabilities have been identified in libspring-java, a modular Java/J2EE application framework. CVE-2014-3578 A...

File upload vulnerability in Tongda OA 2015, 2016 Of***.php file

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. A file upload vulnerability exists in...

CVE-2015-3907

creationtimestamp| type| source ---|---|--- 2019-07-04 00:31:01+00:00| seen| https://t.me/cibsecurity/5355...

CVE-2015-3907

CodeIgniter Rest Server aka codeigniter-restserver 2.7.1 allows XXE attacks...

CVE-2015-3907

CodeIgniter Rest Server (codeigniter-restserver) 2.7.1 is affected by an XML External Entity (XXE) vulnerability. The CVE entry CVE-2015-3907 states XXE attacks, and connected advisories corroborate CodeIgniter Rest Server XXE vulnerability. No explicit details on affected product versions beyond...

SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2019:1716-1)

This update for glibc fixes the following issues : Security issue fixed : CVE-2015-5180: Fixed a NULL pointer dereference with internal QTYPE bsc941234. Feature work: IBM zSeries arch13 hardware support in glibc added fate327072, bsc1132678 Other issue addressed: Fixed a concurrency issue with...

SUSE-SU-2019:1716-1 Security update for glibc

This update for glibc fixes the following issues: Security issue fixed: - CVE-2015-5180: Fixed a NULL pointer dereference with internal QTYPE bsc941234. Feature work: - IBM zSeries arch13 hardware support in glibc added fate327072, bsc1132678 Other issue addressed: - Fixed a concurrency issue wit...

USN-4033-1: libmysofa vulnerability

It was discovered that a libmysofa component does not properly validate multiplications and additions, and may crash with some specific input...

CVE-2019-2015

CVE-2019-2015 affects Android devices and centers on rw_t3t_act_handle_check_rsp in rw_t3t.cc, where a missing bounds check can cause an out-of-bounds write. This leads to local elevation of privilege with no additional execution privileges needed; user interaction is required to exploit. Affecte...

Securifi Almond Buffer Overflow Vulnerability

The Securifi Almond is a wireless router with a touch screen. A buffer overflow vulnerability exists in routerSummary in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Securifi Almond Command Injection Vulnerability (CNVD-2019-18745)

The Securifi Almond is a wireless router with a touch screen. A command injection vulnerability exists in the port forwarding feature in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to submit a malicious payload and take control o...

CVE-2017-8330

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a UPnP functionality for devices to interface with the router and interact with the device. It seems that the "NewInMessage" SOAP parameter passed with a huge payload results in...

CVE-2017-8334

CVE-2017-8334 affects Securifi Almond, Almond+, and Almond 2015 devices running firmware AL-R096. The vulnerability stems from failing to implement protection against cross-site scripting forgery in the web management interface, enabling an attacker to lure a logged-in admin/user into executing a...

CVE-2017-8331

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new port forwarding rules to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set ...

CVE-2017-8329

Securifi Almond/Almond+ (2015) devices with firmware AL-R096 are affected. A POST parameter mssid_1 in the webServer’s routerSummary flow lacks string length checks, allowing an attacker to send a large payload that overflows a stack/buffer (via the goahead binary on MIPS Little Endian), potentia...

Design/Logic Flaw

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way...

CVE-2017-8335

The CVE-2017-8335 issue affects Securifi Almond, Almond+, and Almond 2015 devices running firmware AL-R096. A stack/return-address overflow arises in the handling of the mssid_1 POST parameter when setting the wireless network name, via the getCfgToHTML path in the vulnerable goahead binary (MIPS...

CVE-2017-8336

The CVE-2017-8336 issue affects Securifi Almond, Almond+, and Almond 2015 devices running AL-R096. A vulnerable function in the goahead binary (MIPS little endian) processes POST parameters for creating routes; specifically, the POST parameter “gateway” can overflow the stack and allow an attacke...

CVE-2015-0097

creationtimestamp| type| source ---|---|--- 2019-06-18 06:53:33+00:00| published-proof-of-concept| https://t.me/Pen7esting/209 2020-10-09 16:45:56+00:00| seen| MISP/b3670ebe-02cd-42bc-a70a-abbd8349fb0a 2025-08-31 03:13:03+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...