EZPhotoShare 1.0/1.1 Memory Corruption Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9150/info eZphotoshare has been reported prone to multiple remote memory corruption vulnerabilities. The issues present themselves in the routines employed by eZphotoshare to handle network based communications. It has be...

Roger Wilco 1.4.1 - Remote Server Side Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8566/info A vulnerability has been reported for various Roger Wilco server releases. The problem occurs server-side, and can be triggered when processing malformed client packets. Specifically, when connecting to a server...

CVE-2014-1369: Improper Input Validation

WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site...

IBM Rational RequisitePro 7.10 ReqWeb Help Feature ReqWebHelp/advanced/workingSet.jsp operation Parameter XSS

No description provided by source...

GNU CFEngine 2.0.x/2.1 AuthenticationDialogue Remote Heap Based Buffer Overrun Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/10899/info GNU cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability. The vulnerability presents itself in the cfengine cfservd AuthenticationDialogue function. The issue exists due to a...

CVE-2014-4669

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

PT-2014-6051

Name of the Vulnerable Software and Affected Versions HP Enterprise Maps version 1.00 Description The issue allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote...

CVE-2014-4669: Exposure of Sensitive Information to an Unauthorized Actor

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied

Use-after-free vulnerability in the nfqnlzcopy function in net/netfilter/nfnetlinkqueuecore.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the...

UBUNTU-CVE-2014-0203

The dofollowlink function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service incorrect free operations and system crash via an open system call...

DiscuzX 任意文件操作漏洞

简要描述： DiscuzX 任意文件操作漏洞 详细说明： 漏洞实际上是任意文件删除，但是由于删除的函数容易被定位，所以不方便写在简要描述或标题内。 昨天下载DiscuzX 3.2的代码，在 source/include/spacecp/spacecpprofile.php 中找到以下代码： if$GET'deletefile' && isarray$GET'deletefile' foreach$GET'deletefile' as $key = $value ifisset$G'cache''profilesetting'$key echo...

Hacker Exploits NAS Vulns to Mine $620K in Dogecoin

A hacker, well-versed in malware and exploit development, took advantage of vulnerabilities in Synology network attached storage boxes popular with home users to mine more than $600,000 worth of the digital currency Dogecoin. Researchers Pat Litke and David Shear of Dell SecureWorks’ Counter Thre...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)

java-160-openjdk was updated to 1.12.5 bnc817157 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework...

Design/Logic Flaw

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors...

Simple SQLi Dumper v5.1 - Tool to find bugs, errors or vulnerabilities in MySQL database

SSDp is an usefull penetration tool to find bugs, errors or vulnerabilities in MySQL database. Functions SQL Injection Operation System Function Dump Database Extract Database Schema Search Columns Name Read File read only Create File read only Brute Table & Column Download Simple SQLi Dumper v5....

check_mk symbolic links vulnerability

Symbolic links are not checked during files operation...

Easy currency network operation and maintenance improper leads can be randomly logged in user-bug warning-the black bar safety net

Easy currency network operation and maintenance improper can lead to a random user login http://www. easecoin. com/ vulnerability address You can get the user SESSION login ! ! Feel free to test landing 2 Repair solutions: You can repair, I will not waste the effort of typing to what vulnerabilit...

Grand network operation and maintenance improper lead to sensitive information disclosure-vulnerability warning-the black bar safety net

Test it OPENSSL that python /Users/apple/Desktop/ssltest.py www.snda.com ! ! Just want to test the next vulnerability...

Cherished network of two operation and maintenance improper lead the attacker into the internal network get database-vulnerability warning-the black bar safety net

Cherished network of two operation and maintenance improper lead the attacker into the internal network get database Cherished network two operations, the first of May into the internal network, the other available at the three libraries of the password, but I even didn't even, the only prove...

大汉版通所属部分系统文件任意文件上传漏洞

简要描述： 任意类型文件上传，可getshell。影响到jact、jsearch、JCMS相关版本，不好一一统计。 详细说明： 受影响的系统版本是WebService中存在一个receivefile操作的，一般在wsInfo服务中。 （注：不同产品不同版本代码可能会有所不同） 0x1 jsearch public String receivefileString strLoginId, String strPwd, String strKey, DataHandler handler, String filename, int iState String result = "";...