WordPress dl-skin.php Arbitrary File Download

An arbitrary file download vulnerability exists in dl-skin.php file. A remote attacker might gain access to arbitrary files using a specially crafted HTTP request...

Buffer overflow

Buffer overflow in Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service system crash via a crafted app...

CVE-2016-5230

The CVE-2016-5230 entry affects Huawei Mate8 devices (NXT-AL, NXT-CL, NXT-DL, NXT-TL variants before specific builds). A crafted app can bypass permission checks and control partial module functions, per the description and multiple connected sources. The Huawei security advisory HWPSIRT-2016-030...

CVE-2016-5231

Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app...

CVE-2016-5232: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service system crash via a crafted app...

Google Chrome File Replacement

The vulnerability in the Google Chrome browser’s browser/safebrowsing/srtfieldtrialwin.cc component does not use HTTPS protocol for the dl.google.com service when the Software Removal Tool is executed. Exploiting this vulnerability allows a malicious actor to replace the chromecleanuptool.exe fil...

UBUNTU-CVE-2016-1693

browser/safebrowsing/srtfieldtrialwin.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chromecleanuptool.exe aka CCT file via a man-in-the-middle attack on an HTTP session...

CVE-2016-3680

Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service crash or possibly gain privileges via a crafted application, aka...

Through the ELF dynamic loading of the structure ROP chain Return-to-dl-resolve-the vulnerability warning-the black bar safety net

Play CTF game stick have know that PWN type of vulnerability topic will generally provide an executable program, and provide program run dynamically link the libc library. By the libc. so you can get the library function of the offset address, combined with the leak GOT the table in the libc...

PT-2016-3855

Name of the Vulnerable Software and Affected Versions LenovoEMC EZ Media & Backup hm3 versions prior to 4.1.204.33661 LenovoEMC ix2/ix2-dl versions prior to 4.1.204.33661 LenovoEMC ix4-300d versions prior to 4.1.204.33661 LenovoEMC px12-400r/450r versions prior to 4.1.204.33661 LenovoEMC px6-300d...

Low: ruby19, ruby20, ruby21, ruby22

Issue Overview: DL::dlopen could open a library with tainted library name even if $SAFE 0. Affected Packages: ruby19, ruby20, ruby21, ruby22 Issue Correction: Run yum update ruby19 or yum update --advisory ALAS-2016-632 to update your system. Run yum update ruby20 or yum update --advisory...

Updated ruby packages fix security vulnerability

There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi CVE-2015-7551...

MGASA-2016-0007 Updated ruby packages fix security vulnerability

There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi CVE-2015-7551...

FreeBSD : Ruby -- unsafe tainted string vulnerability (3b50881d-1860-4721-aab1-503290e23f6c)

Ruby developer reports : There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi. And, about DL, CVE-2009-5147 was fixed at Ruby 1.9.1, but not fixed ...

ruby: unsafe tainted string usage

There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi...

Unsafe tainted string usage in Fiddle and DL

There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi. And, about DL, CVE-2009-5147 was fixed at Ruby 1.9.1, but not fixed at other branches, then...

Ruby -- unsafe tainted string vulnerability

Ruby developer reports: There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi. And, about DL, CVE-2009-5147 was fixed at Ruby 1.9.1, but not fixed a...

PT-2017-4790

Name of the Vulnerable Software and Affected Versions: Ruby versions 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 Description: The issue concerns the DL::dlopen function in Ruby, which opens libraries with tainted names. This could potentially lead to security issue...

Buffer overflow

Buffer overflow in Ricoh DL FTP Server 1.1.0.6 and earlier allows remote attackers to execute arbitrary code via a long USER command...

CVE-2015-6750

CVE-2015-6750 describes a buffer overflow in Ricoh DL FTP Server 1.1.0.6 and earlier, where a long USER command can allow a remote attacker to execute arbitrary code. The issue affects the Ricoh DL FTP Server family and is evidenced across multiple sources in the connected documents. The provided...