13788 matches found
Ubuntu 12.04 LTS : openjdk-6 vulnerabilities (USN-2827-1)
Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2015-4805, CVE-2015-4835, CVE-2015-4843, CVE-2015-4844,...
Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2826-1)
It was discovered that the SCTP protocol implementation in the Linux kernel performed an incorrect sequence of protocol-initialization steps. A local attacker could use this to cause a denial of service system crash. CVE-2015-5283 Dmitry Vyukov discovered that the Linux kernel's keyring handler...
Zhongkexinye Network Sentinel Arbitrary File Upload Vulnerability (CNVD-2015-07932)
ZKXY Network Sentinel is an Internet security auditing system that integrates behavioral auditing and content auditing and is deployed at the network exit in a bypass mode. ZKXN Network Sentry suffers from an arbitrary file upload vulnerability. An attacker can exploit the vulnerability to upload...
SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2015:2168-1) (FREAK)
The java-171-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues : - bnc955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844...
Debian DLA-357-1 : libphp-snoopy security update
It was discovered that missing input sanitizing in Snoopy, a PHP class that simulates a web browser may result in the execution of arbitrary commands. For the oldoldstable distribution squeeze-lts, this problem has been fixed in version 2.0.0-1deb6u1. We recommend that you upgrade your...
Embedded Devices Share, Reuse Private SSH Keys, HTTPs Certificates
Researchers have found that thousands of Internet gateways, routers, modems and other embedded devices share cryptographic keys and certificates, exposing millions of connections to man-in-the-middle attacks that open the door to more extensive intrusions that jeopardize encrypted data. This type...
Debian DLA-354-1 : nss security update
Several vulnerabilities have been discovered in nss, the Mozilla Network Security Service library. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-7181 The secasn1dparseleaf function improperly restricts access to an unspecified data structure, which...
Debian DLA-352-1 : libcommons-collections3-java security update
The Apache commons collection suffered from security issues, making applications to accept serialized objects from untrusted sources. Remote attackers might take advantage of these issues to execute arbitrary Java functions and even inject manipulated bytecode. This release of...
SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2015:2108-1)
The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2015-8104: Prevent guest to host DoS caused by infinite loop in microcode via DB exception bsc954404. - CVE-2015-5307: Prevent guest to host DoS caus...
Debian DLA-350-1 : eglibc security update
The strxfrm function is vulnerable to integer overflows when computing memory allocation sizes similar to CVE-2012-4412. Furthermore since it fallbacks to use alloca when malloc fails, it is vulnerable to stack-based buffer overflows similar to CVE-2012-4424. Those issues have been fixed in Debia...
CVE-2015-8214
CVE-2015-8214 affects Siemens SIMATIC CP modules (CP 342-5, CP 343-1 variants, CP 443-1 variants, TIM 3V-IE/4R-IE, including SIPLUS) across many versions. Root cause: the access protection layer could allow unauthenticated users to perform administrative operations if network access to port 102/T...
JVN#21968837: ManageEngine Firewall Analyzer vulnerable to directory traversal
ManageEngine Firewall Analyzer provided by Zoho Corporation is a log analytics and configuration management software for network security devices. ManageEngine Firewall Analyzer contains a directory traversal vulnerability. Impact An authenticated attacker may be able to obtain arbitrary files on...
JVN#12991684: ManageEngine Firewall Analyzer fails to restrict access permissions
ManageEngine Firewall Analyzer provided by Zoho Corporation is a log analytics and configuration management software for network security devices. ManageEngine Firewall Analyzer contains a vulnerability where access permissions are not restricted. Impact An attacker may be able to obtain server...
Debian DLA-346-1 : openjdk-6 security update
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform. These vulnerabilities relate to execution of arbitrary code, breakouts of the Java sandbox, information disclosure and denial of service. For Debian 6 'Squeeze', these problems have been fixed ...
Vulnerability acquisition platform Zerodium publication of various types of software and digital intrusion method price list-vulnerability warning-the black bar safety net
! 1 1 May 1 8, Zerodium（0day brokers published a variety of from a network of criminals to buy and then resell to the needs of the target software and intrusion methods of the price list. Vulnerabilities platform released a price list Zerodium CEO Chaouki bekrar has said: “0day trading the first...
SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2015:2065-1)
The dracut package was updated to fix the following security and non-security issues : - CVE-2015-0794: Use mktemp instead of hard-coded filenames, possible vulnerability bsc935338. - Always install mdraid modules bsc935993. - Add notice when dracut failed to install modules bsc952491. - Always...
Linux/x86-64 - Polymorphic execve Shellcode (31 bytes)
/ ;Title: polymorphic execve shellcode ;Author: d4sh&r ;Contact: https://mx.linkedin.com/in/d4v1dvc ;Category: Shellcode ;Architecture:linux x8664 ;SLAE64-1379 ;Description: ;Polymorphic shellcode in 31 bytes to get a shell ;Tested on : Linux kali64 3.18.0-kali3-amd64 1 SMP Debian 3.18.6-1kali2...
SUSE SLED11 / SLES11 Security Update : ntp (SUSE-SU-2015:2058-1)
This ntp update provides the following security and non security fixes : - Update to 4.2.8p4 to fix several security issues bsc951608 : - CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK - CVE-2015-7855: decodenetnum will ASSERT botch instead of returni...
SUSE SLED11 / SLES11 Security Update : xscreensaver (SUSE-SU-2015:2054-1)
The xscreensaver package was updated to fix the following security and non security issues : - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. - Added xscreensaver-insignalhandlerp.patch needed for fix of signal handling. - Refresh xscreensaver-stars.patch. Note th...
