F5 Networks BIG-IP : file vulnerability (SOL16875)

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2015-8737

The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...

JosephErnest Void Cross-Site Scripting Vulnerability

JosephErnest Void is a content management system CMS. A cross-site scripting vulnerability exists in the index.php script in versions of JosephErnest Void prior to 2015-10-02. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of a specially...

CVE-2015-5742

Summary of CVE-2015-5742 : In Veeam Backup & Replication, the VeeamVixProxy component stored Local Administrator credentials in log files with world-readable permissions, enabling a local user to read sensitive data from logs. Affected versions are Veeam B&R prior to 8.0 Update 3. The issue arise...

Web Reference Database PHP Remote File Inclusion Vulnerability

Web Reference Database aka refbase is a web-based multi-user interface product developed by the refbase community to provide search tools and automatic indexing for scientific literature management. A PHP remote file inclusion vulnerability exists in the install.php script in Web Reference Databa...

CVE-2015-7716

libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 20721050, a different vulnerability than CVE-2015-3873...

CVE-2015-6601

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 22935234...

台州市极速网络CMS /data/log/passlog.php 任意代码执行漏洞

先看根目录当中的login.php? $ISLOGIN = true; require "./includes/headinc.php"; registershutdownfunction'unionend'; if$action == 'logout' $unionuser = $unionpass = $gid = ''; //clearcookies; //$sessarr = array; $SESSIONsessarr = $sessarr = ''; sessionunregister'sessarr'; echo "meta http-equiv="refresh"...

CVE-2014-4651

It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, cause a denial of service, or perform other attacks...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to gain access to protected information.

The vulnerability of the Configuration Log File component of the Cisco TelePresence Video Communication Server software lies in the lack of protection for sensitive data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to protected information by analyzing log...

Cross site scripting

Cross-site scripting XSS vulnerability in the "Create download task via file upload" feature in Synology Download Station before 3.5-2962 allows remote attackers to inject arbitrary web script or HTML via the name element in the Info dictionary in a torrent file...

LOYTEC Router Information Exposure Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified a password file vulnerability in LOYTEC’s LIP-3ECTB routers. LOYTEC has produced a firmware update to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following LOYTEC routers are affected:...

PHP 5.5.9 - 'zend_executor_globals' 'CGIMode FPM WriteProcMemFile' disable_functions Bypass / Load Dynamic Library

?php // EDB Note: Paper https://www.exploit-db.com/docs/english/38104-shoot-zendexecutorglobals-to-bypass-php-disablefunctions.pdf errorreporting0x66778899; settimelimit0x41424344; define'ZENDINIUSER', 10; define'ZENDINIPERDIR', 11; define'ZENDINISYSTEM', 12; / 00df9000-00e16000 rw-p 00000000 00:...

SiteFactory CMS 5.5.9 Path Traversal File Vulnerability

Exploit for php platform in category web applications |||||||||||||| + Title: SiteFactory CMS 5.5.9 Path Traversal File = \ , + Date: 19-8-2015 = | + Autor Guillermo Garcia Marcos = / + Vendor: http://www.mindbite.se/ / \ o\ + Dork : inurl:/sitefactory/assets/ | | \ \ + info: The file parameter i...

Moderate: Red Hat Security Advisory: ppc64-diag security, bug fix and enhancement update

Updated ppc64-diag packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which giv...

CVE-2015-3681

Apple Type Services ATS in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3682...

CVE-2015-3681

Apple Type Services ATS in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3682...

SOL16875 - file vulnerability CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference. CVE-2012-1571...

Apple MAC OS X Font File Handling Processing Arbitrary Code Execution Vulnerability (CNVD-2015-04267)

Apple Mac OS X is a commercial operating system. An arbitrary code execution vulnerability exists in Apple Mac OS X's handling of specially crafted font files, which allows an attacker to construct a malicious file that can be parsed by a user to execute arbitrary code...

PT-2015-4916 · Debian +2 · Pycode-Browser

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a predictable temporary file vulnerability. No further details are provided about the nature of the issue, affected devices, or real-world incidents...