Scientific Linux Security Update : kernel on SL7.x x86_64 (20160512)

Security Fixes : - A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local, unprivileged user could use a specially crafted X.509 certificate DER file to crash the system or, potentially, escalate their privilege...

Xerces DTDScanner Memory Misreference Vulnerability

Xerces is the United States Apache Apache Software Foundation of an open source XML document parsing project , but also an open source XML syntax parser , it is currently available in a variety of languages , including JAVA, C++, PERL, COM and so on. A memory misreference vulnerability exists in...

Samsumg android phone denial of service vulnerability (CNVD-2016-02879)

Samsumg android phone is a series of cell phone products based on Android platform. The Samsumg android system service fails to properly handle exceptions, allowing local attackers to conduct denial of service attacks by sending malicious service commands...

Advanced Encryption Package Buffer Overflow Vulnerability

Advanced Encryption Package is an advanced password shell program. A buffer overflow vulnerability exists in Advanced Encryption Package that stems from mishandling of an exception.1006 bytes resulting in an overflow. An attacker could gain administrator privileges...

[SECURITY] Fedora 22 Update: xstream-1.4.9-1.fc22

XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for...

The exception in the exception--by means of a system of exception handling exception achieve incredible exploit-vulnerability warning-the black bar safety net

Memory read, write, execute attribute is system security the most important one of the mechanisms. Usually, if you want to overwrite the data in memory, you must first ensure that the block of memory having a write attribute, if you want to execute a piece of code in memory, you must first ensure...

The exception in the exception: by means of a system of exception handling exception achieve incredible exploit-vulnerability warning-the black bar safety net

Memory read, write, execute attribute is system security the most important one of the mechanisms. Usually, if you want to overwrite the data in memory, you must first ensure that the block of memory having a write attribute, if you want to execute a piece of code in memory, you must first ensure...

[SECURITY] Fedora 24 Update: xstream-1.4.9-1.fc24

XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for...

Microsoft Enhanced Mitigation Experience Toolkit Security Bypass Vulnerability

Microsoft Enhanced Mitigation Experience Toolkit is a security tool introduced in response to vulnerabilities. It protects users from attacks even when patches are not installed through technologies such as Data Execution Protection DEP, Structured Exception Handling Override Protection SEHOP, an...

Avast! - Authenticode Parsing Memory Corruption

Avast! - Authenticode Parsing Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=668 The attached PE file causes memory corruption in Avast, it looks related to authenticode parsing. 474.c0c: Access violation - code c0000005 first chance First chance...

DLA-445-2 squid3 - regression update

Bulletin has no description...

DLA-445-1 squid3 - security update

Bulletin has no description...

Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer

Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer Source: https://code.google.com/p/google-security-research/issues/detail?id=698 There is a dangling pointer that can be read, but not written to in loadPCMFromByteArray. A minimal PoC is as follows: var s = new Sound; var b = new ByteArray...

Adobe Flash - textfield Constructor Type Confusion

Source: https://code.google.com/p/google-security-research/issues/detail?id=701 There is a type confusion vulnerability in the TextField constructor in AS3. When a TextField is constructed, a generic backing object is created and reused when subsequent TextField objects are created. However, if a...

Network Scanner 4.0.0.0 SEH Crash Proof Of Concept

-- coding: utf-8 -- Exploit Title: Network Scanner Version 4.0.0.0 SEH Crash POC POC Dork: N/A Date: 2016-02-15 Author: INSECT.B Twitter : @INSECT.B Facebook : https://www.facebook.com/B.INSECT00 Blog : http://binsect00.tistory.com Vendor Homepage: http://www.mitec.cz/ Software Link:...

Advanced Encryption Package - Buffer Overflow (Denial of Service) (PoC)

Advanced Encryption Package - Buffer Overflow Denial of Service PoC Dear List, Greetings from vishnu @dH4wk 1. Vulnerable Product - Advanced Encryption Package - Company http://www.aeppro.com/ 2. Vulnerability Information A Buffer OverFlow Impact: Attacker gains administrative access Remotely...

USN-2843-2 linux-lts-wily vulnerabilities

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 郭永刚 discovered that the pp...

Multiple Huawei eSpace switch denial of service vulnerabilities

Huawei eSpace U1910, eSpace U1911, eSpace U1930, eSpace U1960, eSpace U1980, and eSpace U1981 are eSpace U1900 series switch products from Huawei, China. A security vulnerability exists in the exception handling mechanism in the CLI Module of several Huawei eSpace switches, which allows remote...

Code injection

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service CLI outage via crafted SSH packets...

CVE-2015-7845

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service CLI outage via crafted SSH packets...