972 matches found
Digium Asterisk res_pjsip_pubsub Module SIP SUBSCRIBE Type Confusion Denial of Service (CVE-2014-6609)
A denial of service vulnerability exists in Asterisk Open Source. The vulnerability is due to the way SIP SUBSCRIBE requests with unexpected mixes of headers for a given event package are handled. Remote, unauthenticated attackers could exploit this vulnerability by sending malformed SIP SUBSCRIB...
MailChimp Subscribe Form <= 1.1 - Email Field Remote PHP Code Execution
Remote Code Execution via email field...
CVE-2014-6609
The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...
CVE-2014-6609
The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...
CVE-2014-6609
The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...
CVE-2014-6609
The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...
CVE-2014-6609
The CVE-2014-6609 issue affects Asterisk Open Source 12.x prior to 12.5.1, where the res_pjsip_pubsub module allows remote authenticated users to crash the server by sending crafted SIP SUBSCRIBE requests with mixed headers for a given event package. This results in a denial of service. Root caus...
'The Hacker News' Celebrating its 4th Anniversary
Dear THN Readers, 'The Hacker News' is celebrating its 4th Anniversary today and we would like to thank every single Hacker, Researcher, Journalist, Enthusiast who has contributed to our phenomenal growth. When we began our journey 4 years back as a Small Local Community of few Hackers and Securi...
UBUNTU-CVE-2014-6251
Stack-based buffer overflow in CPUMiner before 2.4.1 allows remote attackers to have an unspecified impact by sending a mining.subscribe response with a large nonce2 length, then triggering the overflow with a mining.notify request...
Asterisk PJSIP Channel Driver DoS (AST-2014-009)
According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a denial of service vulnerability in the PJSIP channel driver. This is due to a flaw in the 'respjsippubsub' module. The issue is triggered when handling a SIP SUBSCRIBE reque...
[SECURITY] Fedora 19 Update: mosquitto-1.3.2-1.fc19
Mosquitto is an open source BSD licensed message broker that implements t he MQ Telemetry Transport protocol version 3.1. MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power...
Mail Subscribe List - Script Insertion
The Mail Subscribe List WordPress plugin was affected by a Script Insertion security vulnerability...
Subscribe To Comments Reloaded 140204 - options/index.php manager_page Parameter Stored XSS Weakness
The Subscribe To Comments Reloaded WordPress plugin was affected by an options/index.php managerpage Parameter Stored XSS Weakness security vulnerability...
WordPress Subscribe To Comments Reloaded Plugin <= 140204 - CSRF
This plugin is prone to an options/index.php admin settings manipulation CSRF vulnerability. It allows to perform unauthorized actions in the context of a logged-in user of the affected application. Solution Update the plugin...
Subscribe Me Pro 2.44 S.PL Remote Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14817/info Subscribe Me Pro is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. Exploitation of this vulnerability could lead to a loss of confidentiality ...
GNU Mailman 2.0.x Subscribe Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5298/info GNU Mailman is prone to a cross-site scripting vulnerability. Arbitrary HTML and script code are not sanitized from the URI parameters of mailing list subscribe scripts. An attacker may exploit this issue by...
SiteInteractive Subscribe Me Setup.PL Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9253/info It has been reported that the SiteInteractive Subscribe Me setup.pl script lacks sufficient sanitization on user-supplied URI parameters; an attacker may invoke this script remotely and and by passing sufficient...
CGI Script Center Subscribe Me Lite 2.0 Administrative Password Alteration (2)
No description provided by source. source: http://www.securityfocus.com/bid/1607/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Subscribe Me Lite. This would grant the user full administrative privileges which includes addition o...
CVE-2014-4045
The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before 12.3.1, when subminexpiry is set to zero, allows remote attackers to cause a denial of service assertion failure and crash via an unsubscribe request when not subscribed to the device...
CVE-2014-4045
The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before 12.3.1, when subminexpiry is set to zero, allows remote attackers to cause a denial of service assertion failure and crash via an unsubscribe request when not subscribed to the device...