CVE-2016-9916

QEMU 9pfs vulnerability CVE-2016-9916: memory leak in hw/9pfs/9p-proxy.c due to missing cleanup in the proxy backend, allowing a local privileged guest to exhaust host memory and potentially crash the QEMU process. Affected: QEMU with 9p filesystem (proxy backend). Root cause: missing cleanup ope...

UBUNTU-CVE-2016-9915

Memory leak in hw/9pfs/9p-handle.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash by leveraging a missing cleanup operation in the handle backend...

PT-2016-2999 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to a memory leak in the hw/9pfs/9p-proxy.c function of the QEMU hardware emulator's proxy backend service. This leak can be exploited by a local user of the guest operatin...

UBUNTU-CVE-2016-9923

Quick Emulator Qemu built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in the guest. A guest user/process could use this flaw to crash a Qemu process on the host resulting in DoS...

CVE-2016-9923

Quick Emulator Qemu built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in the guest. A guest user/process could use this flaw to crash a Qemu process on the host resulting in DoS...

Oracle Property Management Platform remote command execution and the cardholder data is decrypted vulnerability analysis-vulnerability warning-the black bar safety net

Recently, I found that in some large business hotel, the reception data management system of Oracle Opera in the presence of a plurality of security vulnerabilities. Hackers can exploit these vulnerabilities, the hotel booking App mentioning the right to get higher user usage rights; at the same...

X (Formerly Twitter): Remote Unrestricted file Creation/Deletion and Possible RCE.

Hello Gents, During my research on Twitter BBP, I found below domain name: Reverb.twitter.com Background: We worked with Twitter to develop TwitterReverb, an application that reveals how conversations arise and reverberate across the entire Twitter landscape. The custom application allows visitor...

NetsCaler: Smart Card Authentication with EULA using nfactor

We need to do Smart Card Authentication on the NetScaler virtual server NetScaler Gateway or Load balancing and also we need the users to accept the End User License Agreement EULA before they could access the backend resource...

Elevation of Privilege Vulnerability in the background of emlog personal blog system

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A privilege elevation vulnerability exists in the background /src/admin/data.php page of the emlog personal blog system. An attacker can exploit the vulnerability to elevate privileges by importing files...

SQL Injection Vulnerability in Mito MetInfo V5.3 Backend

MetInfo is an enterprise website management system with PHP Mysql architecture. A SQL injection vulnerability exists in the backend of MetInfo V5.3. Due to the lack of filtering of the class1 parameter, which allows attackers to exploit the vulnerability to obtain sensitive database information...

Mito MetInfo V5.3.13 Backend Write File Vulnerability

MetInfo is an enterprise website management system with PHP Mysql architecture. A write file vulnerability exists in the backend of MetInfo V5.3.13. It allows attackers to exploit the vulnerability to write to the existing files and gain access to the web server...

McAfee VirusScan Enterprise SQL Injection Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A SQL injection vulnerability exists in VirusScan Enterprise for Linu...

Become a Linux Expert — Get this Online 5-Course Training Bundle

Linux is considered as one of the most favorite operating systems for hackers and security researchers. The open source operating system is often used for building technologies as it offers developers much room for modifications. Linux is used on many hardware platforms, servers, gaming platforms...

Phpems V3.1 Backend Editor Has Arbitrary File Upload Vulnerability

PHPEMS PHP Exam Management System online mock exam system based on PHP + Mysql development, is a support for a variety of question types and presentation of PHP online mock exam system. Phpems V3.1 version of the backend editor exists arbitrary file upload vulnerability, due to the backend editor...

Arbitrary File Write Vulnerability in FineCMS Backend

FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. An arbitrary file write vulnerability exists in the config/site.ini.php page of the FineCMS backend. Allows attackers to upload webshell and gain server privileges...

Insecure Unserialize in TYPO3 Backend

More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-023/...

Insecure Unserialize in TYPO3 Backend

It has been discovered, that TYPO3 is susceptible to Insecure Unserialize. Component Type: TYPO3 CMS Release Date: November 22, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Insecure Unserialize Affected Versions: Versions 6.2.0 to 6.2.28, 7.6.0 to 7.6.12 and 8.0.0 to 8.4.0 Severity:...

Habari CMS 0.9.2 Cross Site Scripting Vulnerability

Habari CMS version 0.9.2 suffers from a cross site scripting vulnerability. Document Title: =============== Habari CMS v0.9.2 - Backend Comments XSS Vulnerability Product & Service Introduction: =============================== While there are a number of technical reasons that highlight the...

Insecure Unserialize and SQL Injection in extension "Code Highlighter" (mh_code_highlighter)

It has been discovered that the extension "Code Highlighter" mhcodehighlighter is susceptible to Insecure Unserialize and SQL Injection. Release Date: November 14, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: versio...

Multiple vulnerabilities in extension "TC Directmail " (tcdirectmail)

It has been discovered that the extension "TC Directmail " tcdirectmail is susceptible to Cross Site-Scripting and SQL Injection. Release Date: November 11, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 3.1.1...