CVE-2017-11099

When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c...

The Secret Code of Beatrix Potter

Interesting: As codes go, Potter's wasn't inordinately complicated. As Wiltshire explains, it was a "mono-alphabetic substitution cipher code," in which each letter of the alphabet was replaced by a symbol­ -- the kind of thing they teach you in Cub Scouts. The real trouble was Potter's own fluen...

Emby MediaServer 3.2.5 - SQL Injection Vulnerability

Exploit for multiple platform in category web applications Emby MediaServer 3.2.5 Boolean-based Blind SQL Injection Vulnerability Vendor: Emby LLC Product web page: https://www.emby.media Affected version: 3.2.5 3.1.5 3.1.2 3.1.1 3.1.0 3.0.0 Summary: Emby formerly Media Browser is a media server...

Emby MediaServer 3.2.5 Boolean-based Blind SQL Injection

Emby MediaServer 3.2.5 Boolean-based Blind SQL Injection Vulnerability Vendor: Emby LLC Product web page: https://www.emby.media Affected version: 3.2.5 3.1.5 3.1.2 3.1.1 3.1.0 3.0.0 Summary: Emby formerly Media Browser is a media server designed to organize, play, and stream audio and video to a...

Emby MediaServer 3.2.5 - SQL Injection

Emby MediaServer 3.2.5 - SQL Injection Emby MediaServer 3.2.5 Boolean-based Blind SQL Injection Vulnerability Vendor: Emby LLC Product web page: https://www.emby.media Affected version: 3.2.5 3.1.5 3.1.2 3.1.1 3.1.0 3.0.0 Summary: Emby formerly Media Browser is a media server designed to organize...

Emby MediaServer 3.2.5 - SQL Injection

Emby MediaServer 3.2.5 Boolean-based Blind SQL Injection Vulnerability Vendor: Emby LLC Product web page: https://www.emby.media Affected version: 3.2.5 3.1.5 3.1.2 3.1.1 3.1.0 3.0.0 Summary: Emby formerly Media Browser is a media server designed to organize, play, and stream audio and video to a...

KB4019460: Security Update for the libjpeg Information Disclosure Vulnerability for Mono Framework (macOS)

The Mono Framework application installed on the remote macOS or Mac OS X host is missing security update KB4019460. It is, therefore, affected by an information disclosure vulnerability in the libjpeg and libjpeg-turbo libraries of Mono Framework. An unauthenticated, remote attacker can exploit...

SUSE-SU-2016:2958-1 Security update for mono-core

mono-core was updated to fix the following vulnerabilities: - CVE-2009-0689: Remote attackers could cause a denial of service and possibly arbitrary code execution through the string-to-double parser implementation. bsc958097 - CVE-2012-3543: Remote attackers could cause a denial of service throu...

SUSE SLES11 Security Update : mono-core (SUSE-SU-2016:2958-1)

mono-core was updated to fix the following vulnerabilities : - CVE-2009-0689: Remote attackers could cause a denial of service and possibly arbitrary code execution through the string-to-double parser implementation. bsc958097 - CVE-2012-3543: Remote attackers could cause a denial of service...

mono-log.jp Open Redirect vulnerability

Open Bug Bounty ID: OBB-171737 Description| Value ---|--- Affected Website:| mono-log.jp Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

Parrot OS 3.0 (Lithium) - Friendly OS designed for Pentesting, Computer Forensic, Hacking, Cloud pentesting, Privacy/Anonimity and Cryptography

Parrot Security OS is a cloud friendly operating system designed for Pentesting, Computer Forensic, Reverse engineering, Hacking, Cloud pentesting, privacy/anonimity and cryptography. Based on Debian and developed by Frozenbox network. Who can use it Parrot is designed for everyone, from the Pro...

Fedora 23 : mono-4.0.5-2.fc23 (2015-6dec4e6d5f)

apply patch for security issue CVE-2009-0689 1293638 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SUSE SLED11 / SLES11 Security Update : mono-core (SUSE-SU-2016:0257-1)

mono-core was updated to fix the following vulnerabilities : - CVE-2009-0689: Remote attackers could cause a denial of service and possibly arbitrary code execution through the string-to-double parser implementation bsc958097 - CVE-2012-3543: Remote attackers could cause a denial of service throu...

SUSE-SU-2016:0257-1 Security update for mono-core

mono-core was updated to fix the following vulnerabilities: - CVE-2009-0689: Remote attackers could cause a denial of service and possibly arbitrary code execution through the string-to-double parser implementation bsc958097 - CVE-2012-3543: Remote attackers could cause a denial of service throug...

MGASA-2016-0013 Updated mono packages fix security vulnerability

It was found that float-parsing code used in Mono before 4.2 is derived from code vulnerable to CVE-2009-0689. The issue concerns the 'freelist' array, which is a global array of 16 pointers to 'Bigint'. This array is part of a memory allocation and reuse system which attempts to reduce the numbe...

Updated mono packages fix security vulnerability

It was found that float-parsing code used in Mono before 4.2 is derived from code vulnerable to CVE-2009-0689. The issue concerns the 'freelist' array, which is a global array of 16 pointers to 'Bigint'. This array is part of a memory allocation and reuse system which attempts to reduce the numbe...

Mageia: Security Advisory (MGASA-2016-0013)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : mono -- DoS and code execution (4b3a7e70-afce-11e5-b864-14dae9d210b8)

NCC Group reports : An attacker who can cause a carefully-chosen string to be converted to a floating-point number can cause a crash and potentially induce arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DLA-376-1 : mono security update

Mono's string-to-double parser may crash, on specially crafted input. This could theoretically lead to arbitrary code execution. This issue has been fixed in Debian 6 Squeeze with the version 2.6.7-5.1+deb6u2 of mono. We recommend that you upgrade your mono packages. NOTE: Tenable Network Securit...

[SECURITY] [DLA 376-1] mono security update

Package : mono Version : 2.6.7-5.1+deb6u2 CVE ID : CVE-2009-0689 Monos string-to-double parser may crash, on specially crafted input. This could theoretically lead to arbitrary code execution. This issue has been fixed in Debian 6 Squeeze with the version 2.6.7-5.1+deb6u2 of mono. We recommend th...