CMS Lite 1.3.1 - SQL Injection

CMS Lite 1.3.1 - SQL Injection Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.cmslite.co.uk/ Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo:...

PCSC-Lite: Multiple vulnerabilities

Background PCSC-Lite is a middleware to access a smart card using the SCard API PC/SC. Description The SCardReleaseContext function normally releases resources associated with the given handle including “cardsList” and clients should cease using this handle. However, a malicious client can make t...

GLSA-201702-01 : PCSC-Lite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-01 PCSC-Lite: Multiple vulnerabilities The SCardReleaseContext function normally releases resources associated with the given handle including cardsList and clients should cease using this handle. However, a malicious clien...

Updated pcsc-lite packages fix security vulnerability

Once MSGRemoveContext is invoked via SCARDRELEASECONTEXT, cardsList is freed. A repeated invocation of SCARDRELEASECONTEXT with an empty context handle results in a use-after-free followed by a double-free. After MSGRemoveContext, invocation of SCardEstablishContext enable further use-after-free ...

MGASA-2017-0026 Updated pcsc-lite packages fix security vulnerability

Once MSGRemoveContext is invoked via SCARDRELEASECONTEXT, cardsList is freed. A repeated invocation of SCARDRELEASECONTEXT with an empty context handle results in a use-after-free followed by a double-free. After MSGRemoveContext, invocation of SCardEstablishContext enable further use-after-free ...

SUSE SLED12 / SLES12 Security Update : pcsc-lite (SUSE-SU-2017:0286-1)

pcsc-lite was updated to fix one security issue. This security issue was fixed : - CVE-2016-10109: This use-after-free and double-free issue allowed local attacker to cause a Denial of Service and possible privilege escalation bsc1017902. Note that Tenable Network Security has extracted the...

SUSE-SU-2017:0286-1 Security update for pcsc-lite

pcsc-lite was updated to fix one security issue. This security issue was fixed: - CVE-2016-10109: This use-after-free and double-free issue allowed local attacker to cause a Denial of Service and possible privilege escalation bsc1017902...

Ubuntu: Security Advisory (USN-3176-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : PCSC-Lite vulnerability (USN-3176-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3176-1 advisory. Peter Wu discovered that the PC/SC service did not correctly handle certain resources. A local attacker could use this issue to cause PC/SC to crash,...

USN-3176-1: PCSC-Lite vulnerability

Peter Wu discovered that the PC/SC service did not correctly handle certain resources. A local attacker could use this issue to cause PC/SC to crash, resulting in a denial of service, or possibly execute arbitrary code with root privileges...

openSUSE Security Update : pcsc-lite (openSUSE-2017-106)

pcsc-lite was updated to fix one security issue. This security issue was fixed : - CVE-2016-10109: This use-after-free and double-free issue allowed local attacker to cause a Denial of Service and possible privilege escalation bsc1017902. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora 24 : pcsc-lite (2017-8311440c55)

New upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 24 Update: pcsc-lite-1.8.20-1.fc24

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...

Fedora Update for pcsc-lite FEDORA-2017-8311440c55

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for pcsc-lite FEDORA-2017-1a7b8c0730

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-778-1 : pcsc-lite security update

It was discovered that there was a use-after-free and double-free vulnerability in pcsc-lite, a library to access smart cards that use the WindowsR SCard interface 'PC/SC'. For Debian 7 'Wheezy', this issue has been fixed in pcsc-lite version 1.8.4-1+deb7u2. We recommend that you upgrade your...

Fedora 25 : pcsc-lite (2017-1a7b8c0730)

New upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

FreeBSD : Use-After-Free Vulnerability in pcsc-lite (c218873d-d444-11e6-84ef-f0def167eeea)

Peter Wu on Openwall mailing-list reports : The issue allows a local attacker to cause a Denial of Service, but can potentially result in Privilege Escalation since the daemon is running as root. while any local user can connect to the Unix socket. Fixed by patch which is released with hpcsc-lite...

[SECURITY] [DLA 778-1] pcsc-lite security update

Package : pcsc-lite Version : 1.8.4-1+deb7u2 CVE ID : CVE-2016-10109 It was discovered that there was a use-after-free and double-free vulnerability in pcsc-lite, a library to access smart cards that use the WindowsR SCard interface "PC/SC". For Debian 7 "Wheezy", this issue has been fixed in...

[SECURITY] Fedora 25 Update: pcsc-lite-1.8.20-1.fc25

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...