Perl: Multiple vulnerabilities

Background Perl is a highly capable, feature-rich programming language. Description Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges of the...

openSUSE Security Update : perl-DBD-mysql (openSUSE-2017-130)

This update for perl-DBD-mysql fixes the following issues : - CVE-2016-1251: A use-after-free when used with mysqlserverprepare=1 bsc1012546. - CVE-2016-1246: Buffer overflow allowed context-dependent attackers to cause a denial of service crash via vectors related to an error message bsc1002626....

Pirelli DRG A115 ADSL Router DNS Changer

!/bin/bash Pirelli DRG A115 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

SUSE SLES11 Security Update : perl-DBD-mysql (SUSE-SU-2017:0122-1)

This update for perl-DBD-mysql fixes the following issues : - CVE-2016-1246: Buffer overflow allowed context-dependent attackers to cause a denial of service crash via vectors related to an error message bsc1002626. - CVE-2016-1249: Out-of-bounds read when using server-side prepared statement...

SUSE SLES12 Security Update : perl-DBD-mysql (SUSE-SU-2017:0123-1)

This update for perl-DBD-mysql fixes the following issues : - CVE-2016-1251: A use-after-free when used with mysqlserverprepare=1 bsc1012546. - CVE-2016-1246: Buffer overflow allowed context-dependent attackers to cause a denial of service crash via vectors related to an error message bsc1002626....

Malware exploit: Vertexnet

Type: Flood Bots Author: Xylitol !/usr/bin/perl VertexNet v1.1.1 Flood Bots http://www.virustotal.com/file-scan/report.html?id=fd373a8f4adf29001d282b963f126f760afcf3e58117f6024b2d65a36d41f617-1305491791 Xyl2k! :þ use HTTP::Request; use LWP::UserAgent; $URL = "http://localhost/Panel/adduser.php";...

Malware exploit: Xdh

Type: Remote Code Execution Author: shipcod3 / Jay Turla This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule Msf::Exploit::Remote Rank = ExcellentRanking include...

Malware exploit: Legend

Type: Remote Code Execution Author: shipcod3 / Jay Turla This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule Msf::Exploit::Remote Rank = ExcellentRanking include...

SUSE-SU-2017:0123-1 Security update for perl-DBD-mysql

This update for perl-DBD-mysql fixes the following issues: - CVE-2016-1251: A use-after-free when used with mysqlserverprepare=1 bsc1012546. - CVE-2016-1246: Buffer overflow allowed context-dependent attackers to cause a denial of service crash via vectors related to an error message bsc1002626. ...

SUSE-SU-2017:0122-1 Security update for perl-DBD-mysql

This update for perl-DBD-mysql fixes the following issues: - CVE-2016-1246: Buffer overflow allowed context-dependent attackers to cause a denial of service crash via vectors related to an error message bsc1002626. - CVE-2016-1249: Out-of-bounds read when using server-side prepared statement...

Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability

Document Title: =============== Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2027 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 2027...

Platform Independent Meta Information Editor: ExifTool

Platform Independent Meta Information Editor ExifTool is a platform-independent Perl library plus a command-line application for reading, writing and editing meta information in a wide variety of files. ExifTool supports many different metadata formats including EXIF, GPS, IPTC, XMP, JFIF, GeoTIF...

Required Applications and Permissions for Multi-OS FLR and Repository Support for Linux

Purpose This document provides information about required applications that must exist on Linux machines to function with Veeam Backup and Replication. Solution Permissions Requirements Permissions are dependent on the intended role of the Linux server. For more information, review this page of t...

SUSE SLES11 Security Update : perl-DBD-mysql (SUSE-SU-2017:0025-1)

This update for perl-DBD-mysql fixes the following issues : - Add patch to fix CVE-2016-1251 bsc1012546 use-after-free for repeated fetchrowarrayref calls when mysqlserverprepare=1 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE-SU-2017:0025-1 Security update for perl-DBD-mysql

This update for perl-DBD-mysql fixes the following issues: - Add patch to fix CVE-2016-1251 bsc1012546 use-after-free for repeated fetchrowarrayref calls when mysqlserverprepare=1...

XAMPP Control Panel - Denial Of Service

XAMPP Control Panel - Denial Of Service ''' + Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/XAMPP-CONTROL-PANEL-MEMORY-CORRUPTION-DOS.txt + ISR: ApparitionSec Vendor: ===================== www.apachefriends.org Product:...

XAMPP Control Panel - Denial Of Service

''' + Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/XAMPP-CONTROL-PANEL-MEMORY-CORRUPTION-DOS.txt + ISR: ApparitionSec Vendor: ===================== www.apachefriends.org Product: =================== XAMPP Control Panel XAMPP...

CVE-2016-9180

perl-XML-Twig: The option to expandexternalents, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting...

DEBIAN-CVE-2016-9180

perl-XML-Twig: The option to expandexternalents, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting...

CVE-2016-9181

perl-Image-Info: When parsing an SVG file, external entity expansion XXE was not disabled. An attacker could craft an SVG file which, when processed by an application using perl-Image-Info, could cause denial of service or, potentially, information disclosure...