[SECURITY] Fedora 28 Update: libgit2-0.26.5-1.fc28

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

[SECURITY] Fedora 28 Update: libtomcrypt-1.18.2-1.fc28

A comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines. Designed from the ground...

[SECURITY] Fedora 27 Update: libgit2-0.26.5-1.fc27

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

CVE-2018-7546

wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file...

DEBIAN-CVE-2018-14338

samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms other than Apple platforms where glibc is not used, possibly leading to a buffer overflow...

ALPINE-CVE-2018-0361

ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file...

DEBIAN-CVE-2018-0361

ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file...

[SECURITY] Fedora 28 Update: singularity-2.5.2-1.fc28

Singularity provides functionality to make portable containers that can be used across host environments...

[SECURITY] Fedora 27 Update: singularity-2.5.2-1.fc27

Singularity provides functionality to make portable containers that can be used across host environments...

VulnCheck KEV: CVE-2012-5958

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string th...

[SECURITY] Fedora 28 Update: botan2-2.7.0-1.fc28

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

PT-2018-3946

Name of the Vulnerable Software and Affected Versions Libpng versions prior to 1.6.36 Description The issue is related to a stack-based buffer overflow in the get token function in pnm2png.c of the libpng library, which can be exploited by a remote attacker to access sensitive data, compromise da...

[SECURITY] Fedora 28 Update: libgit2-0.26.4-1.fc28

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

Microsoft Windows: Configuration of wireless settings using Windows Connect Now

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winconnectnow.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Configuration of wireless settings using Windows Connect Now Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Bring Your Own Land (BYOL) – A Novel Red Teaming Technique

Introduction One of most significant recent developments in sophisticated offensive operations is the use of “Living off the Land” LotL techniques by attackers. These techniques leverage legitimate tools present on the system, such as the PowerShell scripting language, in order to execute attacks...

Security Bulletin: A vulnerability in Apache Portable Runtime affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Apache Portable Runtime apr. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-12613 DESCRIPTION: Apache Portable Runtime APR could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds...

[SECURITY] Fedora 28 Update: singularity-2.5.1-1.fc28

Singularity provides functionality to make portable containers that can be used across host environments...

[SECURITY] Fedora 27 Update: singularity-2.5.1-1.fc27

Singularity provides functionality to make portable containers that can be used across host environments...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server used by IBM PureApplication System (CVE-2017-12613)

Summary The Apache Portable Runtime APR could allow a remote attacker to obtain sensitive information or cause a denial of service. IBM WebSphere Application Server is shipped as a component of IBM PureApplication System. Information about a security vulnerability affecting IBM WebSphere...

Adobe Reader PDF Client Request Injection Vulnerability

Adobe Reader is a popular application for working with PDF files. A request injection vulnerability exists in the Adobe Reader PDF client. An attacker can exploit the vulnerability to obtain unauthorized information...