The vulnerability of the __wakeup modification in PHP interpreters allows a attacker to trigger a service failure or exert other effects.

The vulnerability of the wakeup modification in PHP interpreters relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to cause service failures or other effects through specially crafted data, as demonstrated in the exception...

CVE-2017-1000050

CVE-2017-1000050 affects JasPer 2.0.12, with a NULL pointer dereference in jp2_encode leading to denial of service. Public advisories (IBM PowerKVM bulletin, Red Hat/CentOS/CentOS advisories, ALAS) confirm remediation via upgrading JasPer to newer versions (e.g., 2.0.24 and beyond) and applying v...

CVE-2017-1000050

JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2encode which failed to check to see if the image contained at least one component resulting in a denial-of-service...

openstack-nova: Sensitive information included in legacy notification exception contexts

An information exposure issue was discovered in OpenStack Compute's exceptionwrapper.py. Legacy notification exception contexts appearing in ERROR-level logs could include sensitive information such as account passwords and authorization tokens...

Microsoft Windows Uniscribe Remote Code Execution Vulnerability(CVE-2017-0283)

We have encountered a crash in the Windows Uniscribe user-mode library, in the memmove function called by USP10!MergeLigRecords, while trying to display text using a corrupted font file: --- 4e0.6dc: Access violation - code c0000005 first chance First chance exceptions are reported before any...

CVE-2017-7518

A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exceptionDB being raised in the guest stack. A user/process inside a guest could use this flaw to...

Microsoft Windows - 'USP10!MergeLigRecords' Uniscribe Font Processing Heap Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1198 We have encountered a crash in the Windows Uniscribe user-mode library, in the memmove function called by USP10!MergeLigRecords, while trying to display text using a corrupted font file: --- 4e0.6dc: Access violation - code...

Microsoft Windows - nt!KiDispatchException Kernel Stack Memory Disclosure in Exception Handling

Microsoft Windows - nt!KiDispatchException Kernel Stack Memory Disclosure in Exception Handling / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1177 According to our tests, the generic exception dispatching code present in the Windows kernel Windows 7-10 discloses portions of...

Microsoft Windows - 'nt!KiDispatchException' Kernel Stack Memory Disclosure in Exception Handling

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1177 According to our tests, the generic exception dispatching code present in the Windows kernel Windows 7-10 discloses portions of uninitialized kernel stack memory to user-mode clients via the CONTEXT structure set up for the...

Microsoft Windows - nt!KiDispatchException Kernel Stack Memory Disclosure in Exception Handling Expl

Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1177 According to our tests, the generic exception dispatching code present in the Windows kernel Windows 7-10 discloses portions of uninitialized kernel stack memory to user-mod...

openstack-nova: Sensitive information included in legacy notification exception contexts

An information exposure issue was discovered in OpenStack Compute's exceptionwrapper.py. Legacy notification exception contexts appearing in ERROR-level logs could include sensitive information such as account passwords and authorization tokens...

ARP Firewall: SCUTUM

SCUTUM is an ARP firewall that prevents your computer from being arp spoofed. Scutum controls “arptables” in your computer so it accepts ARP packets only from the gateway. This way, people with malicious intentions cannot spoof your arp table. Scutum also prevents other people from detecting your...

CVE-2015-3220

The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service runtime exception and process crash...

PYSEC-2017-96

The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service runtime exception and process crash...

Composr CMS v10.0.0 XSS Vulnerability

Composr CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:composr:cms";...

(0Day) Schneider Electric U.motion Builder Error Message Path Information Disclosure Vulnerability

This vulnerability allows remote attackers to acquire path information about vulnerable installations of Schneider Electric U.motion Builder. Authentication is not required to exploit this vulnerability. The specific flaw exists within externalframe.php. Exception information is returned to the...

Composr CMS v10.0.0 - Cross Site Scripting Vulnerability

Document Title: =============== Composr CMS v10.0.0 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2066 Release Date: ============= 2017-06-08 Vulnerability Laboratory ID VL-ID: ====================================...

Information Disclosure

Moodle is susceptible to information disclosure. Attackers can obtain absolute paths by sending invalid requests and reading the exception messages...

Composr CMS v10.0.0 - Cross Site Scripting Vulnerability

Document Title: =============== Composr CMS v10.0.0 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2066 Release Date: ============= 2017-06-07 Vulnerability Laboratory ID VL-ID: ====================================...

Cross-site Scripting (XSS)

Smarty aka smarty-php is vulnerable to cross-site scripting XSS attacks. The attacks exist because it does not properly handle the exception messages in SmartyException class...