openSUSE Security Update : icecast (openSUSE-2015-310)

The streaming server icecast was updated to fix a remote denial of service vulnerability. A remote attacker could crash icecast and cause denial of service when URL Auth is configured and used with streamauth without credentials bnc926402 CVE-2015-3026 %NASLMINLEVEL 70300 C Tenable Network...

大汉政府信息公开多处SQL注入一(附100个案例)

简要描述： 大汉政府信息公开多处SQL注入一附100个案例 详细说明： webservice漏洞，漏洞存在于 /xxgk/services/WSSyncsearchinfo 该WSSyncsearchinfo服务的多个方法，多个参数存在严重漏洞，且该漏洞普遍存在，如 getClientIpAxis wsTest wsSyncGetInfos setBase64 isBase64 setStrAppId 上述方法的多个参数均存在漏洞，这里随便选取一个方法进行测试 首先保存如下内容为wooyun.txt POST /xxgk/services/WSSyncsearchinfo HTTP/1....

UBUNTU-CVE-2015-0202

The moddavsvn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service memory consumption via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes...

Mandriva Linux Security Advisory : dbus (MDVSA-2015:176)

Updated dbus packages fix multiple vulnerabilities : A denial of service vulnerability in D-Bus before 1.6.20 allows a local attacker to cause a bus-activated service that is not currently running to attempt to start, and fail, denying other users access to this service Additionally, in highly...

Fedora 21 : strongswan-5.2.2-2.fc21 (2015-3043)

Fixes strongswan swanctl service issue rhbz1193106 Fixes CVE-2014-9221 denial-of-service vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

SUSE-SU-2015:0694-1 Security update for python-Django

python-Django has been updated to fix two vulnerabilities: URLs starting with control characters could have allowed XSS cross-site-scripting attacks via user-supplied redirect URLs CVE-2015-2317 An infinite loop possibility could be triggered in the striptags function, which allowed denial of...

Splunk Enterprise 6.2.x < 6.2.2 Multiple Vulnerabilities (FREAK)

According to its version number, the Splunk Enterprise hosted on the remote web server is version 6.2.x prior to 6.2.2. It is, therefore, affected by the following vulnerabilities : - A flaw exists with ECDH handshakes when using an ECDSA certificate without a ServerKeyExchange message. This allo...

SUSE-SU-2015:0925-2 Security update for python-PyYAML

python-PyYAML was updated to fix one security issue which could have allowed an attacker to cause a denial of service by supplying specially crafted strings The following issue was fixed: - 921588: python-PyYAML: assert failure when processing wrapped strings equivalent to CVE-2014-9130 in LibYAM...

Ubiquiti Inc.: CSRF in login form would led to account takeover

This researcher was able to demonstrate an CSRF attack against a now decommissioned we service...

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service...

CVE-2015-1563

The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causing a large number messages to be logged...

librsvg2 -- denial of service vulnerability

Adam Maris, Red Hat Product Security, reports: CVE-2015-7557: Out-of-bounds heap read in librsvg2 was found when parsing SVG file...

SUSE-SU-2015:0281-1 Security update for strongswan

This strongswan update fixes the following security and non security issues. - Disallow brainpool elliptic curve groups in fips mode bnc856322. - Applied an upstream fix for a denial-of-service vulnerability, which can be triggered by an IKEv2 Key Exchange payload, that contains the Diffie-Hellma...

CVE-2014-9640

oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted raw file...

CVE-2014-9854

coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service application crash via vectors related to the "identification of image."...

[SECURITY] [DLA 107-1] unbound security update

Package : unbound Version : 1.4.6-1+squeeze4 CVE ID : CVE-2014-8602 Debian Bug : 772622 Florian Maury from ANSSI discovered that unbound, a validating, recursive, and caching DNS resolver, was prone to a denial of service vulnerability. An attacker crafting a malicious zone and able to emit or ma...

Zenoss < 4.2.5 Multiple Vulnerabilities

Binary data 8594.prm...

openSUSE: Security Advisory for openvpn (openSUSE-SU-2014:1594-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service

Exploit for hardware platform in category dos / poc TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.17.0 Build 140520 Rel.75075n Released: 5/20/2014 - Firmware...

F5 Networks BIG-IP : BIND 9.3.0 denial of service vulnerability (SOL4351)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL4351. The text description of this plugin is C F5 Networks...