Unspecified Arbitrary URL Restriction Vulnerability in Apple Safari

Apple Safari is an open source WEB browser. A security vulnerability exists in Apple Safari that can be exploited by remote attackers to construct malicious web pages that can be tricked into parsing and can display arbitrary URLs for phishing attacks...

CVE-2015-3778

bootp in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain potentially sensitive information about MAC addresses seen in previous Wi-Fi sessions by sniffing an 802.11 network for DNAv4 broadcast traffic...

Design/Logic Flaw

bootp in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain potentially sensitive information about MAC addresses seen in previous Wi-Fi sessions by sniffing an 802.11 network for DNAv4 broadcast traffic...

python-oauth2: _check_signature() ignores the nonce value when validating signed urls

It was found that python-oauth2 did not properly verify the nonce of a signed URL. An attacker able to capture network traffic of a website using OAuth2 authentication could use this flaw to conduct replay attacks against that website...

Microsoft Office XML Core Services Information Disclosure Vulnerability (3080129)

This host is missing an important security update according to Microsoft Bulletin MS15-084. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows XML Core Services Information Disclosure Vulnerability (3080129)

This host is missing an important security update according to Microsoft Bulletin MS15-084. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-084: Vulnerabilities in XML core services could allow information disclosure: August 11, 2015

Resolves vulnerabilities in Windows and Office that could allow information disclosure by either exposing memory addresses if a user clicks a specially crafted link or by explicitly allowing the use of Secure Sockets Layer SSL 2.0.Summary This security update resolves vulnerabilities in Microsoft...

MS15-084: Vulnerabilities in XML Core Services Could Allow Information Disclosure (3080129)

The remote Windows host contains a version of Microsoft XML Core Services MSXML that is affected by multiple information disclosure vulnerabilities : - An information disclosure vulnerability exists in XML Core Services MSXML due to the use of Secure Sockets Layer SSL 2.0. A man-in-the-middle...

[SECURITY] Fedora 22 Update: bind-9.10.2-4.P3.fc22

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Exploit for CVE-2015-5477

PoC for BOND9 TKEY assert DoS CVE-2015-5477 This exploit te...

chromium-browser: URL spoofing using pdf files in unspecified

content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alertdialog.pdf...

DEBIAN-CVE-2015-4651

The dissectwccp2r1addresstableinfo function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing IP address strings, which allows remote attackers to cause a denial of service applicatio...

VulnCheck KEV: CVE-2014-3153

The futexrequeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges...

curl: incorrect handling of IP addresses in cookie domain

It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies. An attacker able to trick a user into connecting to a malicious server could use this flaw to set the user's cookie to a crafted domain, making other cookie-related issu...

ThinkSNS存在dns域传送漏洞可获取其域内地址

简要描述： ThinkSNS存在dns域传送漏洞可获取其域内主机 详细说明： ThinkSNS存在dns域传送漏洞可获取其域内地址 漏洞证明： 所属域为：thinksns.com 使用nslookup查看其dns服务器信息： 其中ns4.01isp.net服务器存在dns域传送漏洞，利用该漏洞可获取其域内的相关地址 获取的域名信息 thinksns.com. MX 5 mxbiz1.qq.com thinksns.com. MX 10 mxbiz2.qq.com thinksns.com. A 121.199.57.54 thinksns.com. NS ns3.01isp.com...

Cloudminr Bitcoin Hack Exposes Data on 80,000

Attackers were able to break into servers belonging to Bitcoin cloud-mining platform Cloudminr.io last week and harvest the site’s entire database. Now hackers are attempting to sell the information, which includes thousands of unencrypted usernames, email addresses, and passwords. Cloudminr, a...

The vulnerability of the Cisco IOS operating system allows a perpetrator to obtain information about the MAC addresses of devices and some details regarding the network configuration.

Vulnerability of the CMTS subsystem of the Cisco IOS operating system without protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain device MAC addresses and certain network configuration information using specially crafted IPDR packe...

Apple iOS URL Handling Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the handling of certain URL authentication credentials in Apple iOS, which allows an attacker to construct malicious URIs and trick users into parsing them, whi...

Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-60)

Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions. NOTE: this vulnerability exists because of a...

Cisco uBR10000 Series Universal Broadband Routers Information Disclosure Vulnerability

The Cisco uBR 10000 Series is a router device from Cisco. A security vulnerability exists in the Cisco uBR 10000 Series that allows remote attackers to exploit the vulnerability by sending specially crafted IPDR messages to port 4737 TCP of the target CMTS device, which can obtain sensitive...