Design/Logic Flaw

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCug75942...

CVE-2014-3355: Improper Restriction of Operations within the Bounds of a Memory Buffer

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCug75942...

CVE-2014-3356: Improper Restriction of Operations within the Bounds of a Memory Buffer

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

bash -- out-of-bounds memory access in parser

RedHat security team reports: It was discovered that the fixed-sized redirstack could be forced to overflow in the Bash parser, resulting in memory corruption, and possibly leading to arbitrary code execution when evaluating untrusted input that would not otherwise be run as code. An off-by-one...

PT-2014-5247

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.3 Cisco IOS XE versions 3.3.xXO before 3.3.1XO Cisco IOS XE versions 3.6.xS before 3.7.6S is not accurate, it should be versions 3.6.xS and 3.7.xS before 3.7.6S Corrected to: Cisco IOS XE versions 3.6.xS and...

PT-2014-5248

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.3 Cisco IOS XE versions 3.3.xXO before 3.3.1XO Cisco IOS XE versions 3.6.xS before 3.7.6S is not accurate, it should be versions 3.6.xS and 3.7.xS before 3.7.6S Corrected to: Cisco IOS XE versions 3.6.xS and...

Multipath TCP

Multipath TCP is a set of extensions to regular TCP that enables a single data flow to be separated and carried across multiple connections. An attacker might use these extensions to evade detection by IPS devices...

CVE-2014-3906

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-3906

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-3906

OSK Advance-Flow 4.41 and earlier, including Advance-Flow Forms 4.41 and earlier, are affected by CVE-2014-3906 due to a SQL injection vulnerability. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially enabling access to or modification of data...

Advance-Flow vulnerable to SQL injection

Overview Advance-Flow provided by OSK Co., LTD contains an issue in processing input data, which may result in SQL injection. Yoshinori Ohta of Business Architects Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnershi...

JVN#20812625: Advance-Flow vulnerable to SQL injection

Advance-Flow provided by OSK Co., LTD contains an issue in processing input data, which may result in SQL injection. Impact A user may obtain or alter information on the database. Solution Do not use Advance-Flow The developer has stated that the support of Advance-Flow has been discontinued thus...

PT-2014-5595

Name of the Vulnerable Software and Affected Versions OSK Advance-Flow versions 4.41 and earlier OSK Advance-Flow Forms versions 4.41 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For OSK Advance-Flow versions 4.41 and earlier, update...

CVE-2014-3906: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

IcoScript RAT Malware Communicates Via Yahoo! Mail

A new remote administration Trojan RAT receives command and control instructions through Yahoo Mail, and could be easily modified to communicate with its authors through Gmail or other popular webmail providers. This new RAT’s significance stems primarily from its ability to elude the notice of...

unbreakable enterprise kernel security update

kernel-uek 3.8.13-35.3.2.el7uek - l2tp: fix an unprivileged user to kernel privilege escalation Sasha Levin Orabug: 19229497 CVE-2014-4943 CVE-2014-4943 - ptrace,x86: force IRET path after a ptracestop Tejun Heo Orabug: 19230689 CVE-2014-4699 - net: flowdissector: fail on evil iph-ihl Jason Wang...

ACME micro_httpd Denial Of Service

""" Exploit Title: Buffer Overflow in microhttpd by ACME Date: 4/7/2014 Exploit Author: Yuval tisf Nativ Vendor Homepage: http://www.acme.com/software/microhttpd/ Software Link: http://www.acme.com/software/microhttpd/ Version: June 2012 CVE: CVE-2014-4927 Tested on: D-Link: DSL2750U, DSL2740U,...

ACME micro_httpd - Denial of Service

ACME microhttpd - Denial of Service """ Exploit Title: Buffer Overflow in microhttpd by ACME Date: 4/7/2014 Exploit Author: Yuval tisf Nativ Vendor Homepage: http://www.acme.com/software/microhttpd/ Software Link: http://www.acme.com/software/microhttpd/ Version: June 2012 CVE: CVE-2014-4927 Test...

unbreakable enterprise kernel security update

kernel-uek 3.8.13-35.1.3.el6uek - l2tp: fix an unprivileged user to kernel privilege escalation Sasha Levin Orabug: 19229497 CVE-2014-4943 CVE-2014-4943 - ptrace,x86: force IRET path after a ptracestop Tejun Heo Orabug: 19230689 CVE-2014-4699 - net: flowdissector: fail on evil iph-ihl Jason Wang...