CVE-2016-4580

The x25negotiatefacilities function in net/x25/x25facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request...

CVE-2016-4580

The x25negotiatefacilities function in net/x25/x25facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request...

CVE-2016-4580: Exposure of Sensitive Information to an Unauthorized Actor

The x25negotiatefacilities function in net/x25/x25facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request...

PT-2016-6037

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.5 Description The issue is related to the x25 negotiate facilities function in the Linux kernel, which does not properly initialize a certain data structure. This allows attackers to obtain sensitive...

Pornhub Launches Bug Bounty Program; Offering Reward up to $25,000

With the growing number of cyber attacks and data breaches, a significant number of companies and organizations have started Bug Bounty Programs to encourage hackers and security researchers to find and responsibly report bugs in their services and get a reward. Now, even pornography sites are...

CompuSource Systems - Real Time Home Banking - Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: CompuSource Systems - Real Time Home Banking - Local Privilege Escalation/Arbitrary Code Execution Date: 2/25/16 Exploit Author: email protected Vendor Homepage: https://www.css4cu.com :...

life.illinois.edu XSS vulnerability

Vulnerable URL: https://www.life.illinois.edu/req/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 5 VIP website status:| No Check...

Configuring a SQL staging server to a Veeam Explorer gives “error: 25”

Challenge When configuring a staging SQL server for Veeam Explorers, the following error appears when a malformed server name is provided: A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify th...

Threat Outbreak Alert RuleID21929: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44320 First Published: 2016 March 25 20:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21929 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID21910: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44315 First Published: 2016 March 25 20:44 GMT Last Updated: 2016 March 28 12:29 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21910 and...

Threat Outbreak Alert RuleID21924: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44313 First Published: 2016 March 25 15:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21924 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID21882: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44310 First Published: 2016 March 25 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21882 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID21922: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44308 First Published: 2016 March 25 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21922 may contain the following files: Name | Si...

openSUSE Security Update : MozillaThunderbird (openSUSE-2016-395)

MozillaThunderbird was updated to 38.7.0 to fix the following issues : - Update to Thunderbird 38.7.0 boo969894 - MFSA 2015-81/CVE-2015-4477 bmo1179484 Use-after-free in MediaStream playback - MFSA 2015-136/CVE-2015-7207 bmo1185256 Same-origin policy violation using performance.getEntries and...

SUSE SLED11 / SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0777-1)

This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues : Mozilla Firefox was updated to 38.7.0 ESR bsc969894 - MFSA 2016-16/CVE-2016-1952/CVE-2016-1953 Miscellaneous memory safety hazards rv:45.0 / rv:38.7 - MFSA 2016-17/CVE-2016-1954 Local file overwriting and...

Threat Outbreak Alert RuleID21367: Email Messages Distributing Malicious Software on February 25, 2016

Medium Alert ID: 43755 First Published: 2016 February 25 16:58 GMT Last Updated: 2016 February 26 13:26 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID2136...

Threat Outbreak Alert RuleID20689: Email Messages Distributing Malicious Software on January 25, 2016

Medium Alert ID: 43199 First Published: 2016 January 26 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20689 may contain the following files: Name |...

Threat Outbreak Alert RuleID20687: Email Messages Distributing Malicious Software on January 25, 2016

Medium Alert ID: 43198 First Published: 2016 January 26 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20687 may contain the following files: Name |...

nvpartnership4training.com XSS vulnerability

Vulnerable URL: http://www.nvpartnership4training.com/ClassByTitle.asp?ClassName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 141716...

泛微 OA sysinterface/codeEdit.jsp 页面任意文件上传

0x01 漏洞概述 相关厂商： 泛微OA 官方主页： http://www.weaver.com.cn/ 公开时间： 2015-11-25 漏洞类型： 非授权访问/权限绕过 无需登录上传文件。 http://localhost:8088/sysinterface/codeEdit.jsp?filename=5308.java&filetype=java filename为文件名称 为空时会自动创建。 0x02 漏洞利用 代码详情 String fileid = "Ewv"; String readonly = ""; boolean isCreate = false;...