Internet Bug Bounty: PyFloat_FromString & PyNumber_Long Buffer Over-reads

http://bugs.python.org/issue24802 http://bugs.python.org/issue24803...

Internet Bug Bounty: null pointer deref (segfault) in zend_eval_const_expr

https://bugs.php.net/bug.php?id=70183...

Sudo 1.8.14 - Unauthorized Privilege Vulnerability

Exploit for linux platform in category local exploits Exploit Title: sudo -e - a.k.a. sudoedit - unauthorized privilege escalation Date: 07-23-2015 Exploit Author: Daniel Svartman Version: Sudo ALL=root NOPASSWD: sudoedit /home///test.txt Then, logged as that user, create a subdirectory within it...

hivex security and bug fix update

1.3.3-4.3 - Add missing checks for small/truncated files resolves: rhbz1158993 - Fix typo in man page Win::Hivex.3.pm resolves: rhbz1164693...

chromium-browser: Heap-buffer-overflow in pdfium.

Integer overflow in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via large height and stride value...

Simple Text Message to Hack Any Android Phone Remotely

Own an Android phone? Beware, Your Android smartphones can be hacked by just a malformed text message. Security researchers have found that 95% of Android devices running version 2.2 to 5.1 of operating system, which includes Lollipop and KitKat, are vulnerable to a security bug, affecting more...

yelo.mu XSS vulnerability

Vulnerable URL: http://www.yelo.mu/browse-business-directory/char:D" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 548392 Google Pagerank| 0 VIP website status:| No Check yelo.mu...

Moderate: Red Hat Security Advisory: sudo security, bug fix, and enhancement update

Updated sudo packages that fix one security issue, three bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

curl: Negotiate not treated as connection-oriented

It was discovered that libcurl could incorrectly reuse Negotiate authenticated HTTP connections for subsequent requests. If an application using libcurl established a Negotiate authenticated HTTP connection to a server and sent subsequent requests with different credentials, the connection could ...

web.newmarketchamber.ca Open Redirect vulnerability

Vulnerable URL: http://web.newmarketchamber.ca/external/wcpages/wcdirectory/directory.aspx?listingid=1873=991Y4M8O=uweb=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:46 GMT Vulnerability type:| Open Redirect Vulnerabili...

boisemetroidcoc.wliinc22.com Open Redirect vulnerability

Vulnerable URL: http://boisemetroidcoc.wliinc22.com/CWT/External/WCPages/WCBanners/BannerReferral.aspx?ProfileID=6167=42=0=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:45 GMT Vulnerability type:| Open Redirect...

ds61.ru XSS vulnerability

Vulnerable URL: http://www.ds61.ru/firms/?text=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1796519 Google Pagerank| 2 VIP...

Second Flash Player Zero-day Exploit found in 'Hacking Team' Dump

Another Flash zero-day exploit has emerged from the hundreds of gigabytes of data recently leaked from Hacking Team, an Italian surveillance software company that is long been accused of selling spying software to governments and intelligence agencies. The critical zero-day vulnerability in Adobe...

barnesandnoble.com XSS vulnerability

Vulnerable URL: http://www.barnesandnoble.com/mobile/noresults/%27%22%3Ev0raz%3Cbody/onpageshow=%22%26%2397lert%28'XSSPOSED'%29%22%3E Details: Description| Value ---|--- Patched:| Yes, at 24.01.2016 Latest check for patch:| 24.01.2016 12:27 GMT Vulnerability type:| XSS Vulnerability status:|...

m.windowsitpro.com XSS vulnerability

Vulnerable URL: http://m.windowsitpro.com/search/results/ Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 6 VIP...

FC2 / Rakuten Cross Site Scripting

FC2 & Rakuten Online Websites Multiple XSS Cross-site Scripting and Open Redirect Cyber Vulnerabilities FC2 and Rakuten are the first and second top ranking Japanese local online websites. This post introduces several XSS Cross-site Scripting and Open Redirect bugs of them. The Alexa rank of...

SUSE-SU-2015:1519-1 Security update for qemu

qemu was updated to fix two security issues and augments one non-security bug fix. The following vulnerabilities were fixed: CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape XSA-135 bsc932770 CVE-2015-4037: Avoid predictable directory name for smb config bsc9322...

SUSE-SU-2015:1042-1 Security update for xen

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129 bnc931626...

SUSE-SU-2015:1019-1 Security update for patch

The GNU patch utility was updated to 2.7.5 to fix three security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-1196: directory traversal flaw when handling git-style patches. This could allow an attacker to overwrite arbitrary files by tricking the user into...

Ruby on Rails: Changeable model ids on vanilla update can lead to severely bad side-effects

Proof of concept User.find1.update!id: 1701 But strong params! Disagree. There are cases where less experienced users will allow "id" as a param for a subnested resource and then copy and past that code into that subnested resource's own controller, forgetting to remove the "id". I consider this...