Alibaba Clone B2B Script - Arbitrary File Disclosure

Alibaba Clone B2B Script - Arbitrary File Disclosure Exploit Title: Alibaba Clone B2B Script File Read Vulnerability Date: 2016-06-22 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://alibaba-clone.com/ Version: All Versions Tested on: CentOS and...

libarchive ar parser stack out-of-bounds read vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's ar parser, which can be exploited by an attacker to cause a stack out-of-bounds read...

libarchive mtree parser out-of-bounds read vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's mtree parser that can be exploited by an attacker to cause an out-of-bounds read...

libarchive CPIO Parser Memory Read Vulnerability

libarchive is a multi-format archive and compression library. A memory read vulnerability exists in libarchive's CPIO parser. An attacker can exploit this vulnerability to cause an invalid memory read...

PHP File Read Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A fi...

Pulp Private Key Read Vulnerability

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A private key read vulnerability exists in Pulp that stems from the program allowing the creation of certificates and private keys using 644...

Fusion K2 Wireless Router Override Read Configuration File Vulnerability

The Fusion K2 Wireless Router is a wireless router for home use. The Fusion K2 Wireless Router is vulnerable to an override read configuration file vulnerability. Since Fusion K2 can read the configuration file which contains the password of the logged-in device without logging in, it can illegal...

Oracle Database Server RDBMS Security Component Data Read Vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation, of which RDBMS Security is a database security storage component. A data read vulnerability exists in the RDBMS Security component of Oracle Database Server version 12.1.0.1 and 12.1.0.2, which can be...

Oracle Fusion Middleware HTTP Server Component Data Read Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. Oracle HTTP Server is one of the open source technology based on Apache Web server components. A data read vulnerability exists...

Oracle Java SE and Java SE Embedded JCE Subcomponent Data Read Vulnerability

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

Oracle MySQL Server: DML Subcomponent Data Read Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A data read vulnerability exists in the Server: DML subcomponent of Oracle MySQL. A local attacker could exploit this...

chromium-browser: out-of-bounds read in V8

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted...

CVE-2016-2800

The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite smart font,...

Ipswitch MOVEit DMZ and MOVEit Mobile File Read Vulnerabilities

Ipswitch MOVEit is an automated file transfer system from Ipswitch USA. DMZ and Mobile are among the versions. Ipswitch MOVEit DMZ and MOVEit Mobile have a security vulnerability in the 'Send as attachment' function due to the mobile/sendMsg URI failing to adequately filter the ' serverFileIds'...

MGASA-2015-0489 Updated libpng12 packages fix security vulnerability

There is a underflow read in pngcheckkeyword in pngwutil.c in libpng 1.2.x before 1.2.56 CVE-2015-8540...

Wireshark - dissct_rsl_ipaccess_msg Static Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=660 The following crash due to a static out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr /path/to/file": --- cut --- ==7557==ERRO...

Cisco Firepower 9000 Firepower Extensible Operating System File Read Vulnerability

The Cisco Firepower Extensible Operating System on Firepower 9000 is an operating system from Cisco that runs in the 9000 series firewall appliances. A security vulnerability in Cisco Firepower Extensible Operating System 1.1 1.160 on Cisco Firepower 9000 devices allows remote attackers to read...

SUSE-SU-2015:2017-1 Security update for libpng12-0

The libpng12-0 package was updated to fix the following security issues: - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in pnggetPLTE/pngsetPLTE functions bsc954980. - CVE-2015-7981: Fixed an out-of-bound read bsc952051...

CVE-2015-7314

The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check...

CVE-2015-2059

CVE-2015-2059 affects libin (libidn) prior to 1.31 as used by jabberd2. The issue is an out-of-bounds read triggered by invalid UTF-8 characters in a string, potentially enabling memory disclosure. The provided documents do not specify a vendor patch, version, or concrete remediation for this CVE...