libass: Attempting free in ass_drawing_free

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6332129302544384 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

libass: Attempting free in process_info_line

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6313592492130304 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

libass: Attempting free in reset_render_context

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6213284067803136 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

CVE-2016-3130

An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server BES 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt...

Microix Timesheet Module - SQL Injection

Exploit Title: Microix timesheet module SQL Injection Google Dork: "Copyright by Microix" inurl:"/microixcloud/" Date: 2016-09-06 Software Link: http://www.microix.net/workflow-modules/timesheet-module/ Exploit Author: Anthony Cole Contact: http://twitter.com/acole76 Website:...

Generic DVR Default Credentials Login Attempt

An attacker may attempt to gain access to the system by trying to log in using the default passwords, eventually finding the correct one. Successful exploitation may result in an unauthorized access...

WordPress xmlrpc Weak Password Access Attempt

Sending a request to xmlrpc.php requires authentication. An attacker may attempt guessing passwords to the system while avoiding the admin login page...

Threat Outbreak Alert RuleID23198: Email Messages Distributing Malicious Software on June 1, 2016

Medium Alert ID: 46492 First Published: 2016 June 2 12:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23198 may contain the following files: Name | Size...

CVE-2016-3094

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...

CVE-2016-0798

Memory leak in the SRPVBASEgetbyuser implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory consumption by providing an invalid username in a connection attempt, related to apps/sserver.c and crypto/srp/srpvfy.c...

Error: "There are no apps available at this time. Please check the server and try again"

Consider the following scenario. There are two sites IN GSLB- production and disaster recovery. Production is already working with the StoreFront integration behind it. Customer wanted to test the disaster recovery site using the same URL that resolves to the NetScaler Gateway VIP, creating the...

CVE-2016-1295

CVE-2016-1295 affects Cisco ASA Software 8.4. An unauthenticated, remote attacker can disclose sensitive data during a Cisco AnyConnect client authentication attempt, including the ASA software version. The underlying issue is improper protection of sensitive data during the authentication proces...

Threat Outbreak Alert RuleID17507: Email Messages Distributing Malicious Software on August 21, 2015

Medium Alert ID: 40622 First Published: 2015 August 21 20:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17507 may contain the following files: Name |...

Hide My WP <= 4.53 - Stored-Cross Site Scripting (XSS)

An attacker can make a fake attack attempt which will be logged, and can inject JavaScript. PoC curl --referer 'you are using bad filtering for input ript alert"XSS here" ript; :; ;' http://example.com...

Hide My WP <= 4.51.1 - Stored Cross-Site Scripting (XSS)

An attacker can make a fake attack attempt, with a JavaScripting payload, which will be logged by the plugin, resulting in XSS. The attacker also can spoof their IP address in the logs by setting the X-FORWARDED-FOR header. curl --referer ' // :; ;' --header 'X-FORWARDED-FOR: 8.8.8.8'...

Microsoft Excel File Format Code Execution (MS12-030) - Ver2 (CVE-2012-0141)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel handles memory when opening specially crafted Excel files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Exc...

Microsoft .NET Framework CVE-2015-1672 Remote Denial of Service Vulnerability

Description Microsoft .NET Framework is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to degrade the performance of a .NET-enabled website, causing a denial-of-service condition. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilo...

Threat Outbreak Alert RuleID14530: Email Messages Distributing Malicious Software on April 9, 2015

Medium Alert ID: 38310 First Published: 2015 April 9 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14530 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID13978: Email Messages Distributing Malicious Software on March 17, 2015

Medium Alert ID: 37858 First Published: 2015 March 13 14:51 GMT Last Updated: 2015 March 18 16:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13978 and...

Threat Outbreak Alert RuleID13134: Email Messages Distributing Malicious Software on July 6, 2015

Medium Alert ID: 37030 First Published: 2015 January 16 17:07 GMT Last Updated: 2015 July 7 13:09 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13134 and...