80 matches found
BELL-CVE-2015-6835 CVE-2015-6835 does not affect BellSoft software
Bulletin has no description...
CVE-2015-6835
CVE-2015-6835 affects PHP session deserialization. The session deserializer mishandles multiple php_var_unserialize calls, allowing use-after-free via crafted session data and enabling remote code execution or DoS. Affected: PHP 5.4.45 and 5.5.x before 5.5.29, 5.6.x before 5.6.13. Mitigation: upg...
Joomla vulnerability every day by hackers 1 6 6 0 0 attack-vulnerability warning-the black bar safety net
Whenever a new a vulnerability time, the hackers would hurry up in the vast Internet looking for vulnerable websites, and then invade the site. According to the researchers, they found that joomla latest CVE-2 0 1 5-8 5 6 2 vulnerability, i.e. joomla deserialization remote command execution...
Joomla HTTP Header Unauthenticated Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Joomla HTTP Header Unauthenticated Remote Code Execution', 'Description' = %q Joomla suffers from an unauthenticated remote code...
Medium: php55
Issue Overview: As reported upstream https://bugs.php.net/bug.php?id=69720, A NULL pointer dereference flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash. CVE-2015-7803 A flaw was discovered in the way PHP performed object...
Ubuntu 14.04 LTS : PHP vulnerabilities (USN-2758-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2758-1 advisory. It was discovered that the PHP phar extension incorrectly handled certain files. A remote attacker could use this issue to cause PHP to crash, resulting ...
Ubuntu: Security Advisory (USN-2758-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2758-1: PHP vulnerabilities
It was discovered that the PHP phar extension incorrectly handled certain files. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service. CVE-2015-5589 It was discovered that the PHP phar extension incorrectly handled certain filepaths. A remote attacker cou...
openSUSE Security Update : php5 (openSUSE-2015-609)
The PHP5 script interpreter was updated to fix various security issues : - CVE-2015-6831: A use after free vulnerability in unserialize has been fixed which could be used to crash php or potentially execute code. bnc942291 bnc942294 bnc942295 - CVE-2015-6832: A dangling pointer in the...
openSUSE: Security Advisory for php5 (openSUSE-SU-2015:1628-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 3358-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3358-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3358-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3358-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2015 https://www.debian.org/security/faq -...
CVE-2015-6835
creationtimestamp| type| source ---|---|--- 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38123 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...
CVE-2014-6835
The Herbal Guide Android app (com.pocket.herbal.guide) version 1.0 is affected by CVE-2014-6835 due to failing to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The available sources con...
Apple iOS 多个内存破坏漏洞
BUGTRAQ ID: 66087 CVECAN ID: CVE-2013-5133,CVE-2014-1274,CVE-2013-6835,CVE-2014-1276,CVE-2014-1277,CVE-2014-1281,CVE-2014-1284,CVE-2014-1285,CVE-2014-1286 iOS是由苹果公司为移动设备所开发的操作系统，支持的设备包括iPhone、iPod touch、iPad、Apple TV。 iOS 7.1之前版本在实现上存在多个安全漏洞，攻击者可利用这些漏洞执行中间人攻击、访问任意文件、获取未授权访问权限、绕过安全限制、执行其他攻击。 0 App...
Apple Facetime Information Disclosure
Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being established, revealing the user's identity phone number or email address - Release Date: March 10, 2014 -...
CVE-2013-6835
creationtimestamp| type| source ---|---|--- 2014-03-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39114...
CVE-2008-6835
OpenID 5.x module for Drupal is affected by CVE-2008-6835. The vulnerability is a Cross-site Scripting (XSS) flaw in OpenID 5.x before 5.x-1.2 that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. The affected product is Drupal’s OpenID 5.x module; root cause is...
Unfixed XSS vulnerability at www.fannation.com
Security researcher Uber0n, has submitted on 11/04/2008 a cross-site-scripting XSS vulnerability affecting www.fannation.com, which at the time of submission ranked 6835 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is currentl...