Vulnerability of the PHP interpreter and the Mac OS X operating system, allowing attackers to execute arbitrary code

The vulnerability of the phpsnmperror function ext/snmp/snmp.c in the PHP interpreter and the Mac OS X operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Cisco Firepower 9000 Firepower Extensible Operating System Command Injection Vulnerability

Cisco Firepower Extensible Operating System on Firepower 9000 is a set of operating systems from Cisco that run on 9000 series firewall devices. A security vulnerability exists in the user scripts in the web interface of the Cisco Firepower Extensible Operating System version 1.1 1.160 on Cisco...

Apple iOS CoreText Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS CoreText, which allows remote attackers to exploit the vulnerability to construct special font files that can be tricked into parsing by the user, whi...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sudo package in the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited by a malicious individual who has completed the authentication process...

The vulnerability of the OpenSUSE operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the mono-locale-extras package in the OpenSUSE operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the libvirt-daemon-driver-secret-1.1.1 package on the CentOS operating system can lead to violations of confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libpng-static-1.2.48 package on the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Intel CPU Vulnerability can provide control of your system to attacker

Intel CPU Vulnerability can provide control of your system to attacker The U.S. Computer Emergency Readiness Team US-CERT has disclosed a flaw in Intel chips that could allow hackers to gain control of Windows and other operating systems. The flaw has already been exploited on 64-bit versions of...

Why Pwn2Own Is What's Right With Security

VANCOUVER — When the Pwn2Own contest began in 2007, it was dismissed by some in the industry as nothing more than a publicity stunt meant to inflate the egos of researchers while embarrassing software vendors. But as the fifth edition of the hacker challenge gets underway at the CanSecWest...

datadomain-exec.txt

SUMMARY ======= An arbitrary command execution vulnerability exists in the command line administration interface of the software used by DataDomain appliances. An attacker who is able to access the administration interface could exploit this vulnerability to install malicious software and use the...

Simultaneous multithreading processors may leak information through cache eviction analysis techniques

Overview Operating systems on hardware platforms supporting simultaneous multi-threading Hyper-Threading technology in particular are potentially vulnerable to information leakage to local users. Proof of concept papers and code demonstrating successful attacks against cryptographic keys are in...

Opera Skinned : Arbitrary File Dropping And Execution (Advisory)

Opera Skinned : Arbitrary File Dropping And Execution ====================================================== I ABSTRACT: Like other browsers, Opera Web Browser supports many standard MIME types and also a few Opera-specific MIME types. Of the Opera-specific types, the implementation of the variou...

GetFullPathName overflow - was 'Re: WFTPD "Pro" 3.0 R4 Buffer Overflow'

At 02:44 PM 4/23/2001, Alun Jones wrote: The latest version of WFTPD is vulnerable to a buffer overflow in the RETR and CWD commands. The overflow can be used to completely disable the FTP server, and can probably be exploited to run arbitrary code on the server host. Again, incorrect. The buffer...

WinWebserver-exploit.txt

http://www.sddt.com/files/library/98/06/25/tbc.html Source Programmers Discover Internet Server Bug Daily Transcript Business Report June 25, 1998 Programmers at San Diego Source, the online news service of the San Diego Daily Transcript, have discovered a security hole affecting Web server...

TCP/IP IP Fragmentation Remote DoS (bonk)

It was possible to make the remote server crash using the 'bonk' attack. This is due to a design flaw in the remote operating system's TCP/IP implementation. An attacker may use this flaw to shut down this server, thus preventing the network from working properly. C Tenable Network Security, Inc...