2879 matches found
Python 2.7 array.fromstring Use After Free
Title: Python 2.7 array.fromstring Use After Free Credit: John Leitch [email protected] Url1: http://autosectools.com/Page/Python-array-fromstring-Use-After-Free Url2: http://bugs.python.org/issue24613 Resolution: Fixed The Python 2.7 array.fromstring method suffers from a use after free caus...
DEBIAN-CVE-2015-7970
The p2mpodemergencysweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service CPU consumption and possibly reboot via crafted memory contents that triggers a "time-consuming linear scan,"...
Design/Logic Flaw
The p2mpodemergencysweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service CPU consumption and possibly reboot via crafted memory contents that triggers a "time-consuming linear scan,"...
CVE-2015-7970
CVE-2015-7970 : In Xen, the p2m_pod_emergency_sweep function (arch/x86/mm/p2m-pod.c) in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible. This can let local x86 HVM guest administrators trigger a denial of service via crafted memory contents that cause a time-consuming linear scan related to Popula...
CVE-2009-2626
The zendrestoreinientrycb function in zendini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information memory contents and cause a PHP crash by using the iniset function to declare a variable, then using the inirestore function to restore the...
Security update for haproxy (important)
haproxy was updated to fix two security issues. These security issues were fixed: - CVE-2015-3281: The bufferslowrealign function in HAProxy did not properly realign a buffer that is used for pending outgoing data, which allowed remote attackers to obtain sensitive information uninitialized memor...
Typo3 4.2 / 4.5 Information Disclosure
INFORMAÇÕES: ---------------------------------------------------------- + Name: 0day Typo3 - Full Info Disclosure + Type: Full Info Disclosure + Vendor: https://typo3.org/typo3-cms/ + VULNERABLE VERSIONS: 4.2, 4.5 ---------------------------------------------------------- + AUTOR: Cleiton Pinheir...
JVN#84982142: Pref Shimane CMS vulnerable to SQL injection
Pref Shimane CMS is an open-source Contents Management System CMS. Pref Shimane CMS contains an SQL injection vulnerability. Impact A logged in attacker may execute arbitrary SQL statements. Solution Update the Software Update to the latest version according to the information provided by the...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-05955)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. An information disclosure vulnerability exists in Microsoft IE version 10 and 11 when it fails to properly disclose memory contents...
Apple iOS Symbolic Link Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows local attackers to exploit the vulnerability to modify file system contents via symbolic links...
Geoserver 2.7.1.1 2.6.4 2.5.5.1 - XML External Entity
Geoserver 2.7.1.1 2.6.4 2.5.5.1 - XML External Entity Exploit Title : GeoServer XXE Date : 11/08/2015 Exploit Author : David Bloom Script - Ping to Sven Claessens, Jacques Villemur and Eric Donners Vendor homepage : http://geoserver.org Software Link : http://geoserver.org/release/stable Version ...
Geoserver < 2.7.1.1 / < 2.6.4 / < 2.5.5.1 - XML External Entity
Exploit Title : GeoServer XXE Date : 11/08/2015 Exploit Author : David Bloom Script - Ping to Sven Claessens, Jacques Villemur and Eric Donners Vendor homepage : http://geoserver.org Software Link : http://geoserver.org/release/stable Version : 2.7 : 2.7.1.1 / 2.6 : 2.6.4 / 2.5 : 2.5.5.1 Tested :...
PDF Shaper Buffer Overflow
This module requires Metabuffer: http://metabuffer.com/download Current source: https://github.com/rapid7/metabuffer-framework require 'msf/core' class Metasploit3 'PDF Shaper Buffer Overflow', 'Description' = %q PDF Shaper is prone to a security vulnerability when processing PDF files. The...
The vulnerability of the Thunderbird email client, which allows a hacker to gain access to the contents of memory cells
The vulnerability of the ArrayBufferBuilder::append function in the Thunderbird email client arises due to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to gain access to the contents of memory cells...
The vulnerability of the Firefox browser, which allows a hacker to gain access to the contents of memory cells
The vulnerability of the ArrayBufferBuilder::append function in Firefox is caused by buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain access to the contents of memory cells...
SysAid Help Desk 'rdslogs' Arbitrary File Upload
This module exploits a file upload vulnerability in SysAid Help Desk v14.3 and v14.4. The vulnerability exists in the RdsLogsEntry servlet which accepts unauthenticated file uploads and handles zip file contents in an insecure way. By combining both weaknesses, a remote attacker can accomplish...
SysAid Help Desk 'rdslogs' Arbitrary File Upload
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'zlib' class Metasploit3 "SysAid Help Desk 'rdslogs' Arbitrary File Upload", 'Description' = %q This module exploits a file upload vulnerabilit...
Medium: postgresql8
Issue Overview: A double-free flaw was found in the connection handling. An unauthenticated attacker could exploit this flaw to crash the PostgreSQL back end by disconnecting at approximately the same time as the authentication time out is triggered. CVE-2015-3165 It was discovered that PostgreSQ...
DSA-3301-1 haproxy - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3301-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...