625 matches found
PHP 5.0.0 - 'imap_mail()' Local Denial of Service
...
PHP 5.0.0 - domxml_open_file() Local Denial of Service
PHP 5.0.0 - domxmlopenfile Local Denial of Service...
PHP 5.0.0 - 'domxml_open_file()' Local Denial of Service
...
Rose Wedding Cake Game - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Rose Wedding Cake Game published at the 'play' market has multiple vulnerabilities...
Dreamlike Rose Keyboard Theme - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Dreamlike Rose Keyboard Theme published at the 'play' market has multiple vulnerabilities...
Anonymous claims they Hacked Donald Trump ...Really?
The 'Hacktivist' collective group Anonymous claimed to have leaked personal details of the controversial US presidential candidate Donald Trump, including his Mobile Phone Number and Social Security Number SSN. Donald Trump SSN: 086-38-5955 DOB: 06/14/1946 Phone Number: 212-832-2000 Cell/Mobile...
Drupal Compass Rose Module Cross-Site Scripting Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Compass Rose is one of the direction compass modules. A cross-site scripting vulnerability exists in version 6.x-1.0 of the Drupal Compass Rose module, which can be exploited by an...
Compass Rose - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-138
Compass Rose module provides a type of CCK field that allows to represent the most common orientations North, North-East, East, South-East, South, South-West, West and North-West. The module was embedding a JavaScript library from an external source that was not reliable, thereby exposing the sit...
Fedora 20 : ax25-tools-0.0.10-0.12.rc2.fc20 (2015-6517)
This is an update fixing crash when processing ROSE packets. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
[SECURITY] Fedora 20 Update: ax25-tools-0.0.10-0.12.rc2.fc20
ax25-tools is a collection of tools that are used to configure an ax.25 ena bled computer. They will configure interfaces and assign callsigns to ports as w ell as Net/ROM and ROSE configuration. This package only contains the command line programs; the GUI programs are contained in ax25-tools-x...
[SECURITY] Fedora 21 Update: ax25-tools-0.0.10-0.12.rc2.fc21
ax25-tools is a collection of tools that are used to configure an ax.25 ena bled computer. They will configure interfaces and assign callsigns to ports as w ell as Net/ROM and ROSE configuration. This package only contains the command line programs; the GUI programs are contained in ax25-tools-x...
Windows XP TCP Packet Fragmentation Handling Denial of Service Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TC...
Windows XP TCP Packet Fragmentation Handling Denial of Service Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TC...
Windows XP TCP Packet Fragmentation Handling Denial of Service Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TC...
openSUSE Security Update : kernel (openSUSE-SU-2013:1971-1)
The Linux Kernel was updated to fix various security issues and bugs. - sctp: Use correct sideffect command in duplicate cookie handling bnc826102, CVE-2013-2206. - Drivers: hv: util: Fix a bug in util version negotiation code bnc838346. - vmxnet3: prevent div-by-zero panic when ring resizing...
Flying Cart Cross Site Scripting
Cross Site Scripting on Online Store Flying Cart Risk: Low CWE number: CWE-79 Date: 19/05/2014 Vendor: Flying Cart Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php?p=xss PoC: -Target:...
Debian Security Advisory DSA 2389-1 (linux-2.6 - privilege escalation/denial of service/information leak)
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-2183Andrea Righi reported an issue in KSM, a memory-saving de-duplication...
SuSE 11.3 Security Update : Linux kernel (SAT Patch Numbers 7991 / 7992 / 7994)
The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to 3.0.82 and to fix various bugs and security issues. The following security issues have been fixed : - The chaseport function in drivers/usb/serial/ioti.c in the Linux kernel allowed local users to cause a denial of service NUL...
[USN-1878-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-1878-1 June 14, 2013 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1877-1)
Andrew Honig reported a flaw in the way KVM Kernel-based Virtual Machine emulated the IOAPIC. A privileged guest user could exploit this flaw to read host memory or cause a denial of service crash the host. CVE-2013-1798 An information leak was discovered in the Linux kernel's rcvmsg path for ATM...