CVE-2017-6655

Cisco NX-OS Fibre Channel over Ethernet Denial of Service (CVE-2017-6655): A vulnerability in the FCoE protocol implementation allows an unauthenticated, adjacent attacker to trigger DoS when an FCoE-related process reloads. Affected devices include Cisco NX-OS Software running on Multilayer Dire...

CVE-2016-6655

CVE-2016-6655 affects Cloud Foundry Foundation Cloud Foundry releases prior to v245 and cf-mysql-release prior to v31. A command injection vulnerability exists in a common script used by many Cloud Foundry components, enabling a malicious user to execute arbitrary commands on affected servers. Th...

CVE-2016-6655

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to...

Cisco NX-OS Software Fibre Channel over Ethernet Denial of Service Vulnerability (cisco-sa-20170607-nxos)

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an FCoE-related process unexpectedly reloads. Copyright C 2017 Greenbone Networks GmbH Some tex...

CVE-2016-6655 Utility Script Command Injection | Cloud Foundry

CVE-2016-6655 Utility Script Command Injection Critical Vendor Cloud Foundry Foundation Versions Affected Cloud Foundry release versions prior to v245 cf-mysql-release versions prior to v31 Description A command injection vulnerability was discovered in a common script used by many Cloud Foundry...

CVE-2015-6655

CVE-2015-6655 affects Pligg CMS 2.0.2. A Cross-Site Request Forgery in admin/admin_users.php lets an attacker add an administrator by forging requests, hijacking admin authentication. Public-facing details show PoCs/exploits (e.g., Exploit-DB entry) demonstrating/add-admin CSRF behavior. The avai...

CVE-2015-6655

Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...

Pligg CMS 2.0.2 Cross Site Request Forgery

Admin input name="password" type="text" class="form-control" id="password" value="hacker123" onchange="ch...

Pligg CMS 2.0.2 - CSRF Add Admin Exploit

Exploit for php platform in category web applications Admin input name="password" type="text" class="form-control" id="password" value="hack...

Pligg CMS 2.0.2 - Cross-Site Request Forgery (Add Admin)

Pligg CMS 2.0.2 - Cross-Site Request Forgery Add Admin Admin input name="password" type="text" class="form-control" id="password" value="hacker123" onchange="checkPasswordthis.va...

CVE-2014-6655

The CVE-2014-6655 entry concerns the Tortoise Forum (org.tortoiseforum.android.forumrunner) Android app version 3.5.16. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and retrieve sensitive information v...

openSUSE Security Update : chromium (openSUSE-SU-2014:0327-1)

Chromium was updated to 33.0.1750.117 Stable channel update : - Security Fixes : - CVE-2013-6653: Use-after-free related to web contents - CVE-2013-6654: Bad cast in SVG - CVE-2013-6655: Use-after-free in layout - CVE-2013-6656: Information leak in XSS auditor - CVE-2013-6657: Information leak in...

[SECURITY] [DSA 2883-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2883-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 23, 2014 http://www.debian.org/security/faq -...

Updated chromium-browser-stable packages address multiple vulnerabilities

Use-after-free related to web contents CVE-2013-6653. Bad cast in SVG CVE-2013-6654. Use-after-free in layout CVE-2013-6655. Information leaks in XSS auditor CVE-2013-6656, CVE-2013-6657. Use-after-free in layout CVE-2013-6658. Issue with certificates validation in TLS handshake CVE-2013-6659...

FreeBSD : chromium -- multiple vulnerabilities (9dd47fa3-9d53-11e3-b20f-00262d5ed8ee)

Google Chrome Releases reports : 28 security fixes in this release, including : - 334897 High CVE-2013-6652: Issue with relative paths in Windows sandbox named pipe policy. Credit to tyranid. - 331790 High CVE-2013-6653: Use-after-free related to web contents. Credit to Khalil Zhani. - 333176 Hig...

CVE-2013-6655

CVE-2013-6655 is a use-after-free in Blink used by Google Chrome prior to 33.0.1750.117, related to overflowchanged DOM events during JavaScript–layout interactions. The vulnerability allows remote denial of service or possibly other unspecified impact. Public advisories/updates confirm fixes in ...

Google Chrome < 33.0.1750.117 Multiple Vulnerabilities

Binary data 8130.pasl...

Stable Channel Update

The Stable Channel has been updated to 33.0.1750.117 for Windows, Mac, and Linux. Security Fixes and Rewards This update includes 28 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page fo...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 28 security fixes in this release, including: 334897 High CVE-2013-6652: Issue with relative paths in Windows sandbox named pipe policy. Credit to tyranid. 331790 High CVE-2013-6653: Use-after-free related to web contents. Credit to Khalil Zhani. 333176 High...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6655)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...