CVE-2017-10269

The CVE-2017-10269 entry concerns Oracle Tuxedo (a core component of Oracle Fusion Middleware) with affected versions 11.1.1, 12.1.1, 12.1.3, 12.2.2. Connected sources describe the issue as part of the Jolt protocol vulnerabilities (JoltandBleed) in Oracle Tuxedo/Jolt Server, enabling unauthentic...

CVE-2017-10267

CVE-2017-10267 affects Oracle Tuxedo (Core of Oracle Fusion Middleware). Affected are Oracle Fusion Middleware versions 11.1.1, 12.1.1, 12.1.3 and 12.2.2. The vulnerability is exploitable remotely over the Jolt protocol by an unauthenticated attacker and can result in unauthorized access to Oracl...

Foscam IP Video Camera UPnP Discovery Code Execution Vulnerability(CVE-2017-2879)

Summary An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs ...

SUSE SLES11 Security Update : MozillaFirefox, mozilla-nss (SUSE-SU-2017:2872-2)

This update for MozillaFirefox and mozilla-nss fixes the following issues: Mozilla Firefox was updated to ESR 52.4 bsc1060445 - MFSA 2017-22/CVE-2017-7825: OS X fonts render some Tibetan and Arabic unicode characters as spaces - MFSA 2017-22/CVE-2017-7805: Use-after-free in TLS 1.2 generating...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:2971-1)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...

Debian DLA-1169-1 : postgresql-common security update

A security vulnerability has been found in postgresql-common, Debian's PostgreSQL database cluster management tools. CVE-2017-8806 It was discovered that the pgctlcluster, pgcreatecluster and pgupgradecluster commands handled symbolic links insecurely which could result in local denial of service...

Fierce Buffer Overflow Vulnerability

Exploit for linux platform in category local exploits Exploit Title: Fierce Buffer Overflow Exploit Author : Persian Hack Team Discovered by: Mojtaba MobhaM MojtabaKazemi Vendor HomePage: http://www.ha.ckers.org/fierce/ Version : 0.9.9 - Beta Tested on: Kali Description: Fierce is a...

Circle with Disney Firmware Update Signature Check Bypass Vulnerability(CVE-2017-2898)

Summary An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:2949-1)

This update for ImageMagick fixes the following issues: Security issues fixed : - CVE-2017-15033: A denial of service attack memory leak was fixed in ReadYUVImage in coders/yuv.c bsc1061873 - CVE-2017-11446: An infinite loop in ReadPESImage was fixed. bsc1049379 - CVE-2017-12433: A memory leak in...

Circle with Disney Goclient SSL TLD MITM Vulnerability(CVE-2017-2912)

Summary An exploitable vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this...

IoT is Insecure, Get Over It! Say Researchers

BOSTON—Noted security experts Charlie Miller and Chris Valasek said the Internet of Things can’t be secure, but it can be tamed. Drawing from their car hacking experience, the two spent the morning contemplating the larger universe of IoT security and conceded that there will always be thousands ...

Debian DLA-1164-1 : mupdf security update

Two security issues were discovered in mupdf, a lightweight PDF viewer. CVE-2017-14687 MuPDF allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. This occurs because of mishandling of XML tag name comparisons. CVE-2017-15587 An integer...

Debian DLA-1165-1 : libpam4j security update

It was discovered that libpam4j, a Java binding for libpam.so, does not call pamacctmgmt. As a consequence, the PAM account is not properly verified. Any user with a valid password but with deactivated or disabled account was able to log in. For Debian 7 'Wheezy', these problems have been fixed i...

Circle with Disney Firmware Update Command Injection Vulnerability(CVE-2017-2865)

Summary An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability. Tested...

CVE-2017-2890

The CVE-2017-2890 vulnerability affects Circle with Disney devices running firmware 2.0.1. The /api/CONFIG/restore endpoint is exploitable: the server builds a shell command using the user-supplied appid parameter without sanitization, leading to OS command injection when an authenticated user in...

Fedora 26 : community-mysql (2017-50c790aaed)

A quarter year regular dose of fixed CVE's. https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-20.html . rhbz1497694 : Fix owner and perms on log file in post script CVE fixes: rhbz1503701 CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276 CVE-2017-10279 CVE-2017-10283 CVE-2017-102...

Debian DLA-1162-1 : apr security update

It was discovered that there was an out-of-bounds memory vulnerability in apr, a support/portability library for various applications. When the aprexptime or aprosexptime functions were invoked with an invalid month field value, out of bounds memory may have been be accessed when converting this...

Cisco Patches DoS Flaw in BGP over Ethernet VPN Implementation

Cisco said that changes to its implementation of the Border Gateway Protocol BGP over an Ethernet VPN has created a vulnerability in its IOE XE software. The networking giant has released software updates for IOS XE that patches the issue, which could be exploited remotely without authentication,...

Debian DLA-1160-1 : wordpress security update

WordPress, a web blogging tool, was affected by an issue where $wpdb-prepare can create unexpected and unsafe queries leading to potential SQL injection SQLi in plugins and themes, as demonstrated by a 'double prepare' approach, a different vulnerability than CVE-2017-14723. For Debian 7 'Wheezy'...

Fedora 25 : seamonkey (2017-6e2071419d)

Update to 2.49.1 Based on the Firefox/Thunderbird ESR extension support release code version 52.4.0 Fixes various security issues, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-e sr/ and https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbi rd/ for more...