Telerik Fiddler Elevation of Privilege Vulnerability

Telerik Fiddler is an HTTP protocol debugging proxy tool. A security vulnerability exists in Telerik Fiddler version 5.0.20182.28034, which stems from the program failing to validate the hash value of the EnableLoopback.exe file before running it. An attacker could exploit the vulnerability to...

DEBIAN-CVE-2017-17806

The HMAC implementation crypto/hmac.c in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AFALG-based hash interface CONFIGCRYPTOUSERAPIHASH and the SHA-3 hash algorithm CONFIGCRYPTOSHA3 to caus...

DEBIAN-CVE-2015-4050

FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7, when ESI or SSI support enabled, does not check if the controller attribute is set, which allows remote attackers to bypass URL signing and security...