2544 matches found
Raptor WAF v0.2 - Web Application Firewall using DFA
Raptor WAF is a simple web application firewall made in C, using KISS principle, to make poll use select function, is not better than epoll or kqueue from BSD but is portable, the core of match engine using DFA to detect XSS, SQLi and path traversal. No more words, look at the following : WAF...
PT-2016-3420 · Perl +2 · Perl +2
Name of the Vulnerable Software and Affected Versions: Perl versions prior to 5.22.3-RC2 Perl versions 5.24 prior to 5.24.1-RC2 Description: The issue is related to errors in privilege management in the Perl interpreter, specifically with the handling of the included directory array "@INC". This...
[SECURITY] Fedora 23 Update: kf5-kross-5.24.0-1.fc23
Kross is a scripting bridge to embed scripting functionality into an application. It supports QtScript as a scripting interpreter backend...
[SECURITY] Fedora 23 Update: perl-5.22.2-353.fc23
Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...
[SECURITY] Fedora 24 Update: perl-5.22.2-361.fc24
Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...
The vulnerability of the PHP interpreter allows a remote attacker to trigger a service failure or otherwise affect the system.
The vulnerability of the PHP interpreter in the pharrenamearchive function pharobject.c lies in the use of memory after it is freed. As a result of exploiting this vulnerability, a malicious actor who operates remotely can cause service interruptions or otherwise affect the system by attempting t...
The vulnerability of the PHP interpreter, which allows a remote attacker to create a file with an incorrect name
A vulnerability in the PHP interpreter’s moveuploadedfile function exists due to the truncation of the path when the character \x00 is present. As a result of exploiting this vulnerability, a malicious actor can create a file with an incorrect name, circumventing the restrictions imposed on the...
The vulnerability of the PHP interpreter allows a remote attacker to cause an application to terminate abnormally.
The vulnerability in the PHP interpreter’s GetCode function, located in the gdgifin.c file of the GD component, allows a malicious actor to cause an unexpected termination of the application by reading memory beyond the buffer using a specially crafted GIF image. This image is incorrectly process...
The vulnerability of the PHP interpreter, which allows a malicious attacker to trigger a service failure
The cdfunpacksummaryinfo function in the cdf.c library of the PHP interpreter contains a vulnerability. Exploiting this vulnerability allows an unauthorized attacker to trigger an infinite loop using a specially created CDF file, resulting in service failure due to exhaustion of processor resourc...
The vulnerability of the PHP interpreter, which allows a hacker to trigger a service failure
The vulnerability of the odbcBindcols function ext/odbc/phpodbc.c in the PHP interpreter arises due to incorrect handling of the SQLWVARCHAR column by the driver. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure application termination by using t...
The vulnerability of the PHP interpreter, allowing attackers to execute XXE and XXL attacks
The vulnerability of the ext/libxml/libxml.c file in the PHP interpreter arises from the fact that, when using PHP-FPM, the isolation of individual data threads is not properly implemented. Exploiting this vulnerability allows a remote attacker to execute XXE and XXL attacks using a specially...
The vulnerability of the PHP interpreter allows attackers to cause errors in the application’s operation.
The vulnerability of the PHP format printer component is related to the repeated release of memory. Exploiting this vulnerability can allow a remote attacker to cause an error in the application’s operation...
Debian Security Advisory DSA 3602-1 (php5 - security update)
Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The vulnerabilities are addressed by upgrading PHP to the new upstream version 5.6.22, which includes additional bug fixes. Please refer to the upstream changelog for mor...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the xmlutf8encode function ext/xml/xml.c in the PHP interpreter is related to buffer overflows in dynamic memory, caused by integer overflows. Exploiting this vulnerability could allow an attacker to cause a service failure or potentially have other effects through a long...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the bcpowmod function ext/bcmath/bcmath.c in the PHP interpreter exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially have other adverse effects through specially crafted call...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the phpfilterencodeurl function located in ext/filter/sanitizingFilters.c in the PHP interpreter is related to buffer overflows in dynamic memory, caused by integer overflows. Exploiting this vulnerability could allow a remote attacker to cause a service failure or potentiall...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the bcpowmod function ext/bcmath/bcmath.c in the PHP interpreter exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially have other adverse effects through specially crafted call...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the strpad function ext/standard/string.c in the PHP interpreter is related to buffer overflows in dynamic memory, caused by integer overflows. Exploiting this vulnerability can allow a remote attacker to cause a service failure or potentially have other adverse effects due t...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the exifprocessIFDinJPEG function ext/exif/exif.c in the PHP interpreter improperly checks the size of the IFD file. Exploiting this vulnerability may allow a malicious actor to trigger a service failure memory overflow or potentially cause other effects through specially...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the graphemestrpos function ext/intl/grapheme/graphemestring.c in the PHP interpreter exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability may allow an attacker to cause a service failure reading beyond the memory limit, or it may have...