shopify-scripts: Segmentation fault while printing backtrace

The code below crashes the sandbox/mruby as it tries to print the backtrace. Incidentally, it does not crash mirb. def foon return '' if n \n' ensure % if:n != if n == -1110 else foon-1.% end end %foo0 We are still examining the bug and hope to produce a detailed analysis and a fix this week...

Flaws Found in Popular Printer Models

Vulnerabilities in popular printer models made by HP, Dell and Lexmark expose the devices to attackers who can steal passwords, shut down printers and even steal print jobs. Academic researchers at the University Alliance Ruhr on Monday published a series of advisories and an informational wiki...

Hacking Printers Advisory 2

TL;DR: In the scope of academic research on printer security, various vulnerabilities in network printers and MFPs have been discovered. This is advisory 2 of 6 of the Hacking Printers' series. Each advisory discusses multiple issues of the same category. This post is about accessing a printers...

Hacking Printers Advisory 1

TL;DR: In the scope of academic research on printer security, various vulnerabilities in network printers and MFPs have been discovered. This is advisory 1 of 6 of the Hacking Printers' series. Each advisory discusses multiple issues of the same category. This post is about manipulating and...

ALPINE-CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

DEBIAN-CVE-2016-7926

The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertypeprint...

UBUNTU-CVE-2016-7924

The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oamprint...

[SECURITY] Fedora 24 Update: boomaga-0.8.0-6.git97f52c1.fc24

Boomaga BOOklet MAnager is a virtual printer for viewing a document before printing it out using the physical printer. The program is very simple to work with. Running any program, click "print" and select "Boomaga" to see in several seconds CUPS takes some time to respond the Boomaga window open...

Online Printing Business Clone Script SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Online Printing Business Clone Script Script Buy Now: http://www.popularclones.com/products/Online-Print-Business Author: Ihsan Sencan Author Web: http://ihsan.net Mail ...

Online Printing Business Clone Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Online Printing Business Clone Script Script Buy Now: http://www.popularclones.com/products/Online-Print-Business...

Online Printing Business Clone Script - SQL Injection

Online Printing Business Clone Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Online Printing Business Clone Script Script Buy Now: http://www.popularclones.com/products/Online-Print-Business...

MS16-035: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows Server 2012: March 8, 2016

MS16-035: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows Server 2012: March 8, 2016 November 8, 2016 A detection change was made to account for the .NET Framework 4.6.1 hotfix rollup for customers who were not being correctly offered this security update for th...

openSUSE Security Update : GNU Health and it's dependencies (openSUSE-2017-6)

This update provides version 3.0.5 of GNU Health including several fixes and improvements. - Update to ICD10 version 2016. - Fix error when printing prescription using review dates. - Fix error on summary report when no date of birth is assigned to the person. Additionally the following...

Memory corruption

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via an EMF file...

CVE-2016-7081

Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors...

CVE-2016-7081

VMware Workstation 12.x (both Pro and Player) before 12.5.0 is affected by multiple heap-based buffer overflow vulnerabilities in Cortado ThinPrint handling, allowing a guest OS user to cause host code execution. CVEs include CVE-2016-7081 through CVE-2016-7086; impact is local, with potential ar...

[SECURITY] Fedora 25 Update: ghostscript-9.20-2.fc25

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

Apple iOS < 10.0 Multiple Vulnerabilities

Binary data 9619.prm...

OpenSSL: OOB read in TS_OBJ_print_bio()

An out of bounds read flaw was found in the way OpenSSL formatted Public Key Infrastructure Time-Stamp Protocol data for printing. An attacker could possibly cause an application using OpenSSL to crash if it printed time stamp data from the attacker...

Epson WorkForce Lack Of Firmware Signing / CSRF

OpenSource Security Ralf Spenneberg Am Bahnhof 3-5 48565 Steinfurt [email protected] OS-S Security Advisory 2016-19 Title: Epson WorkForce multi-function printers do not use signed firmware images and allow unauthorized malicious firmware-updates Authors: Yves-Noel Weweler , Ralf Spenneberg , Hendrik...