Adobe Photoshop CC Multiple Vulnerabilities (APSB15-12)

The version of Adobe Photoshop installed on the remote host is prior or equal to CC 2014 15.2.2 2014.2.2. It is, therefore, affected by the following vulnerabilities : - An unspecified memory corruption flaw exists due to not properly validating user-supplied input. An attacker can exploit this t...

Adobe Photoshop CC Multiple Vulnerabilities (APSB15-12) (Mac OS X)

The version of Adobe Photoshop installed on the remote Mac OS X host is prior or equal to CC 2014 15.2.2 2014.2.2. It is, therefore, affected by the following vulnerabilities : - An unspecified memory corruption flaw exists due to not properly validating user-supplied input. An attacker can explo...

CVE-2015-3109

Adobe Photoshop CC before 16.0 aka 2015.0.0 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-3112

CVE-2015-3112 is referenced in APSB15-13 as a memory corruption vulnerability affecting Adobe Photoshop CC before 16.0 and Bridge CC before 6.11. The Nessus/OpenVAS entries corroborate this issue as part of multiple vulnerabilities in Adobe Bridge/Photoshop; vectors are unspecified in the provide...

CVE-2015-3109

Adobe Photoshop CC prior to 16.0 (2015.0.0) is affected by CVE-2015-3109, a memory corruption vulnerability that can allow arbitrary code execution or cause a denial of service via unspecified vectors. This vulnerability affects Photoshop CC on Windows and macOS, as described in multiple advisori...

Photoshop CC2014 and Bridge CC 2014 PDF Parsing Memory Corruption Vulnerabilities

Photoshop CC2014 and Bridge CC 2014 PDF Parsing Memory Corruption Vulnerabilities. CVE-2015-3112. Dos exploit for windows platform Application: Adobe Photoshop CC 2014 & Bridge CC 2014 Platforms: Windows Versions: The vulnerability is confirmed in version Photoshop CC 2014 and Bridge CC 2014...

Photoshop CC2014 Bridge CC 2014 - .png Parsing Memory Corruption

Photoshop CC2014 Bridge CC 2014 - .png Parsing Memory Corruption Application: Adobe Photoshop CC 2014 & Bridge CC 2014 Platforms: Windows Versions: The vulnerability is confirmed in version Photoshop CC 2014 and Bridge CC 2014. Secunia: PRL: 2015-08 Author: Francis Provencher Protek Research Lab’...

Important: Red Hat Security Advisory: cups security update

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates for Adobe Photoshop Creative Cloud CC and Bridge CC to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Adobe...

APSB15-12 Security update available for Adobe Photoshop CC

Adobe has released an update for Photoshop CC for Windows and Macintosh. This update addresses vulnerabilities that could allow an attacker who successfully exploits these vulnerabilities to take control of the affected system...

APSB15-13 Security update available for Adobe Bridge CC

Adobe has released an update for Adobe Bridge CC for Windows and Macintosh. This update addresses vulnerabilities that could allow an attacker who successfully exploits these vulnerabilities to take control of the affected system...

KCodes NetUSB Vulnerability Details Surface

The Department of Homeland Security-sponsored CERT at Carnegie Mellon University today issued an alert warning of a serious vulnerability in KCode NetUSB, which is integrated into products sold by a number of networking vendors. KCodes NetUSB is a Linux kernel module that enables several users on...

KCodes NetUSB kernel driver is vulnerable to buffer overflow

Overview KCodes NetUSB is vulnerable to a buffer overflow via the network that may result in a denial of service or code execution. Description KCodes NetUSB is a Linux kernel module that provides USB over IP. It is used to provide USB device sharing on a home user network.CWE-120: Buffer Copy...

New SMB Flaw Affects All Versions of Windows

There is a serious vulnerability in all supported versions of Windows that can allow an attacker who has control of some portion of a victim’s network traffic to steal users’ credentials for valuable services. The bug is related to the way that Windows and other software handles some HTTP request...

Ceragon FibeAir IP-10 SSH Private Key Exposure

Ceragon FibeAir IP-10 SSH Private Key Exposure CVE-2015-0936 Product Description Ceragon produces a series of ruggedized, microwave backhaul devices used to provide connectivity to mobile, IP-based devices; usually, these devices are found in either large industrial environments, or installed on...

CVE-2015-0941

CVE-2015-0941 : The Inetc plug‑in for NSIS does not validate SSL certificates, enabling MITM attacks that could spoof servers and potentially execute arbitrary code during download of Windows executables. Affected: NSIS Inetc plug‑in (used in FOE and other products). Impact: possible arbitrary co...

DiscuzX 3.2 最新版死循环GET漏洞可对用户和服务器造成拒绝服务影响（有前提条件）

简要描述： DiscuzX3的论坛存在一个缺陷，会导致死循环变成CC攻击服务器，此时浏览器失去响应，关闭都很困难，只能杀死进程。 详细说明： DiscuzX3的论坛存在一个缺陷，如果连续多层楼（例如4层）都有回帖可见的隐藏内容，并且隐藏内容为图片的时候文字暂时没测试，在帖子第一页底部进行回帖，会导致死循环变成CC攻击服务器，此时浏览器失去响应，关闭都很困难，只能杀死浏览器进程。 漏洞证明： 发布一个帖子，1-4层楼都插入图片，并且放进回帖可见的隐藏内容。 其他用户希望看到内容，在底部直接回帖，会导致无限死循环攻击服务器。...

chromium-browser: memory corruption in V8

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers...

Some Cable Modems Found to Leak Sensitive Data Via SNMP

Cable modems sold by two manufacturers expose a wide variety of sensitive information over SNMP, including usernames and passwords, WEP keys and SSIDs. Researchers who discovered the vulnerabilities say they’re trivially exploitable and plan to release Metasploit modules for them later this month...

Android App SSL Certificate Validation Errors Enumerated

A growing compilation of close to 350 Android applications that fail to perform SSL certificate validation over HTTPS has been put together by the CERT Coordination Center at the Software Engineering Institute at Carnegie Mellon University. Researcher Will Dormann created a large spreadsheet host...