CVE-2016-0771

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...

Out-of-bounds

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...

Debian: Security Advisory (DSA-3514-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2922-1 samba vulnerabilities

Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs using symlinks. CVE-2015-7560 Garming Sam and Douglas Bagnall discovered that the Samba internal DNS server incorrectly handled certain DNS TXT...

UBUNTU-CVE-2016-0771

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...

Gratipay: SPF/DKIM/DMARC for aspen.io

1.aspen.io 2.grtp.co SPF record lookup and validation for: grtp.co SPF records are published in DNS as TXT records. The TXT records found for your domain are: Checking to see if there is a valid SPF record. No valid SPF record found of either type TXT or type SPF. SPF record lookup and validation...

Gratipay: No Valid SPF Records.

SPF record lookup and validation for: gratipay.com SPF records are published in DNS as TXT records. The TXT records found for your domain are: ALIAS for nara-9076.herokussl.com Checking to see if there is a valid SPF record. No valid SPF record found of either type TXT or type SPF. Check...

VBScan 0.1.4 - Black Box vBulletin Vulnerability Scanner

VBScan is an opensource project in perl programming language to detect VBulletin CMS vulnerabilities and analyses them. Why VBScan ? If you want to do a penetration test on a vBulletin Forum, VBScan is Your best shot ever! This Project is being faster than ever and updated with the latest VBullet...

ManageEngine Desktop Central 9 FileUploadServlet ConnectionId Exploit

This Metasploit module exploits a vulnerability found in ManageEngine Desktop Central 9. When uploading a 7z file, the FileUploadServlet class does not check the user-controlled ConnectionId parameter in the FileUploadServlet class. This allows a remote attacker to inject a null bye at the end of...

Mail.ru: HTML Injection на e.mail.ru

Здравствуйте, Я обнаружил HTML инъекцию на e.mail.ru с помощью текстовых файлов формата .txt Proof of concept: Создаем HTML файл с правильными тегами, то есть html head body... должны присутствовать. Иначе файл не будет воспроизведен как HTML Меняем конец файла на .txt Далее сжимаем этот файл при...

SUSE SLES11 Security Update : PHP5 (SUSE-SU-2014:0868-1)

PHP5 has been updated to fix two security vulnerabilities : - Heap-based buffer overflow in DNS TXT record parsing CVE-2014-4049 - NULL pointer dereference in GD XPM decoder CVE-2014-2497 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

Fedora 22 : ettercap-0.8.2-1.fc22 (2015-4009)

0.8.2-Ferri Bug Fix !! Fixed some openssl deprecated functions usage !! Fixed log file ownership !! Fixed mixed output print !! Fixed dropprivs function usage !! Fixed nopromisc option usage. !! Fixed missing break in parser code. !! Improved redirect commands !! Fix truncated VLAN packet headers...

Low: Red Hat Bug Fix Advisory: tboot bug fix and enhancement update

Updated tboot packages that fix multiple bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. The tboot packages provide the Trusted Boot tboot open source pre-kernel/VMM module. This module uses Intel Trusted Execution Technology Intel TXT to initialize the launch ...

DES exposure checker - Arbitary File Download Vulnerability

DES exposure checker is a free web application, used to see how real DES images look. This vulnerability allow kind of user can to download a file from the distant server, like PHP files, TXT file, etc. Theory : http://SERVER/getImage.php?name=FILE.EXT Example :...

SuSE 11.3 Security Update : bind (SAT Patch Number 10100)

bind has been updated to version 9.9.6P1, fixing the following security issue : - A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow default 7, and the number of...

ThisData: Missing SPF header on revert.io

Hi, I noticed that there is no TXT record containing a SPF header: PoC dig TXT revert.io +short "google-site-verification=ix6OUwvbN9AJLTcdg3ulWcMibIWGgUyzWEXrWeRYE4" The SPF Header can be used to prevent phishers from impersonating you/your company in the emails' FROM header. Fix You can fix that...

Amazon Linux AMI : php55 (ALAS-2014-372)

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file. A denial of service flaw was found in the way the File Information fileinfo extension parsed certain Composite Document...

[SECURITY] [DLA 67-1] php5 security update

Package : php5 Version : 5.3.3-7+squeeze22 CVE ID : CVE-2014-3538 CVE-2014-3587 CVE-2014-3597 CVE-2014-3538 It was discovered that the original fix for CVE-2013-7345 did not sufficiently address the problem. A remote attacker could still cause a denial of service CPU consumption via a...

DLA-67-1 php5 - security update

Bulletin has no description...

Debian DSA-3008-1 : php5 - security update

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-3538 It was discovered that the original fix for CVE-2013-7345 did not...