Django Remote Denial of Service Vulnerability

Django is a set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. Django has an unspecified security vulnerability vulnerability that allows a remote attacker can exploit the vulnerabili...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2015-04986)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A security vulnerability exists in the TFTP server of Cisco IOS and IOS XE Software, which arises from a program that does not properly manage memory when processing TFTP requests. A remote attack...

Apache Tomcat Denial Of Service Vulnerability (Jun 2015) - Windows

Apache Tomcat is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

Moodle 'lib/externallib.php' Cross-Site Scripting Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in the 'externalformattext' function in the Moodle 'lib/externallib.php' script. A remote...

Juniper Networks Junos OS Bind Denial of Service Vulnerability

Denial of Service vulnerability in Junos ISC Bind version. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

chromium-browser: insecure download of spellcheck dictionary in unspecified component

The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file...

Cisco ANI Configuration Overwrite DoS (CSCup62167)

The remote Cisco device is affected by a vulnerability in the Autonomic Networking Infrastructure ANI due to insufficient validation of received Autonomic Networking AN messages. A remote, unauthenticated attacker, by sending specially crafted AN messages, can exploit this to overwrite...

SUSE-SU-2015:0979-1 Security update for dnsmasq

The DNS server dnsmasq was updated to fix one security issue and one non-security bug. The following vulnerability was fixed: CVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service DoS or read heap memory, potentially disclosing information such as performed DNS...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dhcp-debuginfo package in the SUSE Linux Enterprise operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of Cisco’s operating system IOS, which allows a remote attacker to trigger a service failure

The vulnerability of the Discovery Gateway service allows a malicious actor to trigger a service failure device reboot by sending specially crafted mDNS UDP packets over IPv4 or IPv6...

openSUSE Security Update : icecast (openSUSE-2015-310)

The streaming server icecast was updated to fix a remote denial of service vulnerability. A remote attacker could crash icecast and cause denial of service when URL Auth is configured and used with streamauth without credentials bnc926402 CVE-2015-3026 %NASLMINLEVEL 70300 C Tenable Network...

大汉政府信息公开多处SQL注入一(附100个案例)

简要描述： 大汉政府信息公开多处SQL注入一附100个案例 详细说明： webservice漏洞，漏洞存在于 /xxgk/services/WSSyncsearchinfo 该WSSyncsearchinfo服务的多个方法，多个参数存在严重漏洞，且该漏洞普遍存在，如 getClientIpAxis wsTest wsSyncGetInfos setBase64 isBase64 setStrAppId 上述方法的多个参数均存在漏洞，这里随便选取一个方法进行测试 首先保存如下内容为wooyun.txt POST /xxgk/services/WSSyncsearchinfo HTTP/1....

UBUNTU-CVE-2015-0202

The moddavsvn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service memory consumption via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes...

Mandriva Linux Security Advisory : dbus (MDVSA-2015:176)

Updated dbus packages fix multiple vulnerabilities : A denial of service vulnerability in D-Bus before 1.6.20 allows a local attacker to cause a bus-activated service that is not currently running to attempt to start, and fail, denying other users access to this service Additionally, in highly...

Fedora 21 : strongswan-5.2.2-2.fc21 (2015-3043)

Fixes strongswan swanctl service issue rhbz1193106 Fixes CVE-2014-9221 denial-of-service vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

SUSE-SU-2015:0694-1 Security update for python-Django

python-Django has been updated to fix two vulnerabilities: URLs starting with control characters could have allowed XSS cross-site-scripting attacks via user-supplied redirect URLs CVE-2015-2317 An infinite loop possibility could be triggered in the striptags function, which allowed denial of...

Splunk Enterprise 6.2.x < 6.2.2 Multiple Vulnerabilities (FREAK)

According to its version number, the Splunk Enterprise hosted on the remote web server is version 6.2.x prior to 6.2.2. It is, therefore, affected by the following vulnerabilities : - A flaw exists with ECDH handshakes when using an ECDSA certificate without a ServerKeyExchange message. This allo...

SUSE-SU-2015:0925-2 Security update for python-PyYAML

python-PyYAML was updated to fix one security issue which could have allowed an attacker to cause a denial of service by supplying specially crafted strings The following issue was fixed: - 921588: python-PyYAML: assert failure when processing wrapped strings equivalent to CVE-2014-9130 in LibYAM...

Ubiquiti Inc.: CSRF in login form would led to account takeover

This researcher was able to demonstrate an CSRF attack against a now decommissioned we service...

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service...