1010 matches found
libarchive contains a heap-based buffer overflow due to improper input validation
Overview An attacker may be able to coerce a user into executing arbitrary code in the context of the current user by attempting to unzip a crafted zip file provided by the attacker. Description CWE-20: Improper Input Validation - CVE-2016-1541A crafted zip file can provide an incorrect compresse...
DSA-3529-1 redmine - security update
Bulletin has no description...
Lenovo SHAREit Transfer Unencrypted Vulnerability
Lenovo SHAREit 茄子快传 is a set of file sharing software from the Chinese company Lenovo Lenovo. A transfer unencrypted vulnerability exists in Lenovo SHAREit for Windows before 3.2.0 and SHAREit for Android before 3.5.48ww, where the program transfers files in plaintext. A remote attacker can explo...
fasten.it Open Redirect vulnerability
Vulnerable URL: http://www.fasten.it/revive2/revive-adserver-3.2.0/www/delivery/ck.php?oaparams=2bannerid=45zoneid=2cb=e22cfb7004oadest=https://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability...
CVE-2015-8931
Multiple integer overflows in the 1 gettimetmax and 2 gettimetmin functions in archivereadsupportformatmtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior...
CVE-2015-8916
bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...
PT-2015-7832 · Libarchive +5 · Libarchive +5
Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap, by using a crafted file, either in lzh or lha format. This is due to a problem in the lha read...
PT-2015-7836 · Libarchive +5 · Libarchive +5
Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue is related to the process extra function in libarchive, which can be exploited by remote attackers to cause a denial of service crash via a crafted zip file. This is due to the...
PT-2015-7837 · Libarchive +5 · Libarchive +5
Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted tar file. This is due to a problem in the archive read format tar read header function in archive...
Directory Traversal Vulnerability in Joomla!
Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A directory traversal vulnerability exists in Joomla! versions 3.2.0 through 3.3.x and 3.4.x before 3.4.6. A remote...
Joomla! cross-site request forgery vulnerability (CNVD-2015-08379)
Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A cross-site request forgery vulnerability exists in the comtemplates component in Joomla! versions 3.2.0 through...
PT-2015-1018 · Linux +5 · Linux +5
Name of the Vulnerable Software and Affected Versions: linux-image versions 3.13.0 through 3.15.x linux-image versions 3.2.0 through 3.15.x Description: The issue is related to the implementation of certain splice write file operations in the Linux kernel, which does not enforce a restriction on...
MediaMonkey Player Local Denial of Service (DoS)
No description provided by source. Download : http://download.cnet.com/MediaMonkey-Standard/3000-21414-10109807.html Author: Red-D3v1L sh0otz fly t0 : j0rd4n14n.r1z,H1s0k4,ThE-g0bl!N,T3rr0rist,zAx,dr@g,h311 c0d3 And All sEc-r1z CrEw n00bz : ZombieKSA g0t 0wn3d hehehe n00b pakbugs zf0 ... Version:...
p.mapper 3.2 beta3 incphp/globals.php _SESSION[PM_INCPHP] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and th...
Ubuntu 12.04.0-2LTS x64 perf_swevent_init - Kernel Local Root Exploit
Exploit for linux platform in category local exploits / Ubuntu 12.04 3.x x8664 perfsweventinit Local root exploit by Vitaly Nikolenko email protected based on semtex.c by sd Supported targets: 0 Ubuntu 12.04.0 - 3.2.0-23-generic 1 Ubuntu 12.04.1 - 3.2.0-29-generic 2 Ubuntu 12.04.2 -...
Linux Kernel 3.2.0-23/3.5.0-23 (Ubuntu 12.04/12.04.1/12.04.2 x64) - 'perf_swevent_init' Local Privilege Escalation (3)
/ Ubuntu 12.04 3.x x8664 perfsweventinit Local root exploit by Vitaly Nikolenko [email protected] based on semtex.c by sd Supported targets: 0 Ubuntu 12.04.0 - 3.2.0-23-generic 1 Ubuntu 12.04.1 - 3.2.0-29-generic 2 Ubuntu 12.04.2 - 3.5.0-23-generic $ gcc vnik.c -O2 -o vnik $ uname -r...
Fortinet FortiADC 'locale'参数跨站脚本漏洞
Bugtraq ID:66642 CVE ID:CVE-2014-0331 Fortinet FortiADC是一款应用交付控制器。 通过"locale" GET参数传递给/FortiADC/guipartA/的输入在返回用户之前缺少过滤，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Fortinet FortiADC 3.2.0 Fortinet FortiADC 3.2.1版本已经修复漏洞，建议用户下载使用： http://www.fortiguard.com/...
ActiveHelper LiveHelp, 3.2.0, sqli
ActiveHelper LiveHelp, 3.2.0, SQL Injection We already updated the LiveHelp Server to the version 3.3.0 that include a security patch that fixes the reported issue. We also include a few improvements on other units. Update Notice URL...
Uptime Agent 5.0.1 - Stack Overflow Vulnerability
Exploit for windows platform in category dos / poc Exploit Title: Up.Time Agent 5.0.1 Stack Overflow Date: 28/11/2013 Exploit Author: Denis Andzakovic Vendor Homepage: http://www.uptimesoftware.com/ Version: 5.0.1 Tested on: Debian 7 Kernel 3.2.0, Kali Kernel 3.7 , , . '.' '. ', . , '. , .', , / ...
