PT-2017-15452 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.10 Description: A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files. An empty null write to this file can crash the system by causing the system to attempt ...

CVE-2017-2618

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...

CVE-2015-8862

mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...

Automato - Automating the user-focused enumeration tasks during an internal penetration test

automato should help with automating some of the user-focused enumeration tasks during an internal penetration test. automato is also capable of conducting limited brute force attacks such as: Testing to see if a list of users with a common password exists in the target domain Identifying if a...

CVE-2017-2576

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...

CVE-2017-2576

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...

CVE-2017-2576

Technical details for CVE-2017-2576 are not publicly available in the provided documents; monitor for updates.

MS12-046: Description of the security update for Office 2010 (Vbe7.dll): July 10, 2012

MS12-046: Description of the security update for Office 2010 Vbe7.dll: July 10, 2012 INTRODUCTION Microsoft has released security bulletin MS12-046. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS14-017: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: April 8, 2014

MS14-017: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: April 8, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially...

MS13-067: Description of the security update for SharePoint Server 2010 (coreserver): September 10, 2013

MS13-067: Description of the security update for SharePoint Server 2010 coreserver: September 10, 2013 Introduction This security update resolves vulnerabilities in Microsoft Office Server software that could allow remote code execution in the context of the W3WP service account. Summary Microsof...

MS11-045: Description of the security update for Excel 2010: June 14, 2011

MS11-045: Description of the security update for Excel 2010: June 14, 2011 Introduction Microsoft has released security bulletin MS11-045. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-094: Description of the security update for PowerPoint Viewer 2007: December 13, 2011

MS11-094: Description of the security update for PowerPoint Viewer 2007: December 13, 2011 Introduction Microsoft has released security bulletin MS11-094. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS13-085: Description of the security update for Microsoft Office 2013: October 8, 2013

MS13-085: Description of the security update for Microsoft Office 2013: October 8, 2013 INTRODUCTION Microsoft has released security bulletin MS13-085. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

MS11-060: Description of the security update for Visio 2010: August 9, 2011

MS11-060: Description of the security update for Visio 2010: August 9, 2011 Microsoft has released security bulletin MS11-060. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:http://www.microsoft.com/security/pc-security/bulletins/201108.aspxSkip...

MS12-038: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: June 12, 2012

MS12-038: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: June 12, 2012 Microsoft has released security bulletin MS12-038. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home users:...

Debian DLA-772-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2012-6704, CVE-2016-9793 Eric Dumazet found that a local user with CAPNETADMIN capability could set a socket's buffer size to be negative, leading ...

RoundCube Webmail Cross-Site Scripting Vulnerability (CNVD-2016-13003)

RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in versions of Roundcube Webmail prior to 1.2.0. A remote attacker can exploit this vulnerability to inject...

Verizon Webmail client stored XSS vulnerability-vulnerability warning-the black bar safety net

Write in front of words Before that, I had specialized to write a technical article to explain in detail through Verizon Webmial client of server-side vulnerabilities article transfer gate button. But I recently went in this client found some very interesting vulnerabilities, these vulnerabilitie...

MS16-155: Description of the Security Only Update for the .NET Framework 4.6.2 for Windows 7 and Windows Server 2008 R2: December 13, 2016

MS16-155: Description of the Security Only Update for the .NET Framework 4.6.2 for Windows 7 and Windows Server 2008 R2: December 13, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. A security vulnerability exists in t...

CVE-2016-9685

A flaw was found in the Linux kernel's implementation of XFS file attributes. Two memory leaks were detected in xfsattrshortformlist and xfsattr3leaflistint when running a docker container backed by xfs/overlay2. A dedicated attacker could possible exhaust all memory and create a denial of servic...