UBUNTU-CVE-2018-0500

Curlsmtpescapeeob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings i.e., use of a nonstandard --limit-rate argument or CURLOPTBUFFERSIZE...

Security Bulletin: Vulnerabilities in cURL component shipped with IBM Rational ClearCase (CVE-2017-1000100, CVE-2017-1000254, CVE-2017-1000257)

Summary IBM Rational ClearCase is affected by cURL/libcURL vulnerabilities. Vulnerability Details CVEID: CVE-2017-1000100 DESCRIPTION: cURL could allow a remote attacker to obtain sensitive information, caused by a TFTP URL processing error when doing a TFTP transfer. By redirecting a libcurl-usi...

Security Bulletin: Vulnerability in cURL component shipped with IBM Rational ClearCase (CVE-2015-3153)

Summary IBM Rational ClearCase is affected by a cURL/libcURL CURLOPTHTTPHEADER information disclosure vulnerability. Vulnerability Details CVEID: CVE-2015-3153 DESCRIPTION: cURL/libcURL could allow a remote attacker to obtain sensitive information, caused by custom HTTP headers with sensitive...

Security Bulletin: Vulnerabilities in cURL component shipped with IBM Rational ClearCase (CVE-2018-1000005, CVE-2018-1000007)

Summary IBM Rational ClearCase is affected by cURL/libcURL vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000007 DESCRIPTION: cURL liburl could allow a remote attacker to obtain sensitive information, caused by a flaw when passing on custom Authorization: headers. By sending a...

Security Bulletin: Vulnerabilities in cURL component shipped with ClearCase (CVE-2014-0139)

Summary An attacker could send a specially-crafted certificate to impersonate a server. Vulnerability Details CVEID: CVE-2014-0139 Description: cURL/libcURL could allow a remote attacker to bypass security restrictions, caused by an error in the hostmatch function when validating certificates...

Security Bulletin: Vulnerabilities in cURL component shipped with IBM Rational ClearCase (CVE-2016-8624, CVE-2016-8625)

Summary IBM Rational ClearCase is affected by cURL/libcURL access restriction bypass and network host spoofing vulnerabilities. Vulnerability Details CVEID: CVE-2016-8624 DESCRIPTION: cURL/libcurl could allow a remote attacker to bypass security restrictions, caused by the failure to parse the...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0068

An update of 'curl' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0158

An update of 'curl' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2018-0158

Updates of 'curl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2018-0068

Updates of 'linux-aws', 'linux-secure', 'linux-esx', 'linux', 'curl' packages of Photon OS have been released...

Intrigue-Core - Discover Your Attack Surface

Intrigue-core is a framework for automated attack surface discovery. There are a number of use cases: Application and Infrastructure Asset Discovery Security Research and Vulnerability Discovery Malware Campaign Research & Indicator Enrichment Exploratory OSINT Research If you'd like assistance...

EulerOS 2.0 SP3 : curl (EulerOS-SA-2018-1203)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that libcurl did not safely parse FTP URLs when using the CURLOPTFTPFILEMETHOD method. An attacker, able to provide a specially craft...

EulerOS 2.0 SP2 : curl (EulerOS-SA-2018-1202)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl version curl 7.20.0 to and including curl 7.59.0 contains a Buffer Over-read vulnerability in denial of service that can result in curl can b...

WordPress Core 4.9.6 - (Authenticated) Arbitrary File Deletion

WordPress Core 4.9.6 - Authenticated Arbitrary File Deletion Exploit Title: Wordpress = 4.9.6 Arbitrary File Deletion Vulnerability Date: 2018-06-27 Exploit Author: VulnSpy Vendor Homepage: http://www.wordpress.org Software Link: http://www.wordpress.org/download Version: = 4.9.6 Tested on: php7...

WordPress 4.9.6 Arbitrary File Deletion

Exploit Title: Wordpress = 4.9.6 Arbitrary File Deletion Vulnerability Date: 2018-06-27 Exploit Author: VulnSpy Vendor Homepage: http://www.wordpress.org Software Link: http://www.wordpress.org/download Version: = 4.9.6 Tested on: php7 mysql5 CVE : Step 1: curl -v...

GLSA-201806-05 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201806-05 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause a Denial of Service condition,...

cURL: Multiple vulnerabilities

Background A command line tool and library for transferring data with URLs. Description Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact Remote attackers could cause a Denial of Service condition, obtain sensitive...

Security Bulletin: A vulnerability in curl affects PowerKVM

Summary PowerKVM is affected by a vulnerability in curl. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-1000257 DESCRIPTION: cURL is vulnerable to a denial of service, caused by a buffer overread in the IMAP handler. By using a specially crafted IMAP FETCH respons...

Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM) (CVE-2016-9586, CVE-2017-7407 )

Summary Multiple vulnerabilities have been identified in curl that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9586 DESCRIPTION: cURL/libcurl is vulnerable to a buffer overflow, caused by improper boundary checks by the floating poi...

Security Bulletin: A vulnerability in curl affects PowerKVM

Summary PowerKVM is affected by a vulnerability in curl. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-7167 DESCRIPTION: libcurl could allow a local attacker to execute arbitrary code on the system, caused by an integer overflow in the curlescape, curleasyescape,...