UBUNTU-CVE-2016-3977

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service application crash via the background color index in a GIF file...

CVE-2016-3977

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service application crash via the background color index in a GIF file...

Background Eraser - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Background Eraser published at the 'play' market has multiple vulnerabilities...

Hack The Pentagon Bug Bounty Opens April 18

The Department of Defense announced today that registration for its Hack the Pentagon bug bounty trial program is open, and that the program will be run on the HackerOne platform. The trial of the government’s first bug bounty program will run April 18 to May 12. The DoD said only certain...

Soundy Background Music 3.1 Cross Site Scripting

FULL DISCLOSURE Product : Soundy Background Music Exploit Author : Rahul Pratap Singh Version : 3.1 Home page Link : https://wordpress.org/plugins/soundy-background-music/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 12/3/2016 XSS Vulnerabilit...

WordPress Soundy Background Music Plugin <= 3.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability, because “warsoundyaudiovolume” parameter is not sanitized. Solution Update the plugin...

we7cms file upload vulnerability

we7cms is a content management system based on asp.net development. we7cms V3.0 system file upload vulnerability, the vulnerability is mainly caused by information leakage of the background upload service exposure, the uploaded service failed to get the identity verification, and the file format...

How do I Customize Unified Gateway Portal?

Use Case Portal is the first interaction point for end users and hence important to have correct representation of an organization. Customize the look and feel, color, logo and labels on the Gateway portal to brand the portal as per organizational standards. Introduction to Portal Customization...

Why a War Studies PhD?

When I begin receiving multiple questions on a topic, it's a signal that I should write a blog post. Several of you have asked me about my experience as a PhD candidate in the King's College London Department of War Studies. In this post I will try to answer your questions by explaining how I got...

Samba Denial of Service Vulnerability (CNVD-2015-08524)

Samba is a set of programs that implement the SMB Server Messages Block protocol, cross-platform file sharing and print sharing services. A denial-of-service vulnerability exists in Samba version 4.x prior to 4.1.22. Failure to check return values allows remote attackers to cause a...

Seemingly tasteless ESPCMS background injected, can actually be a lot of fun-vulnerability warning-the black bar safety net

Yesterday, the black bar safety net loophole platform exposes a ESPCMS of injection vulnerabilities, Ali cloud computing security attack and defense against a team of friends first time on the vulnerability to do an impact assessment. Did not think need to login to the backend before it can be...

Scientific Linux Security Update : sssd on SL7.x x86_64 (20151119)

It was found that SSSD's Privilege Attribute Certificate PAC responder plug-in would leak a small amount of memory on each authentication request. A remote attacker could potentially use this flaw to exhaust all available memory on the system by making repeated requests to a Kerberized daemon...

Limesurvey Unauthenticated File Download

This module exploits an unauthenticated file download vulnerability in limesurvey between 2.0+ and 2.06+ Build 151014. The file is downloaded as a ZIP and unzipped automatically, thus binary files can be downloaded. This module requires Metasploit: https://metasploit.com/download Current source:...

Apple iOS kernel security bypass vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices. kernel is one of the kernel components. A security vulnerability exists in the kernel of Apple iOS versions prior to 8.4.1, which stems from a failure of the program to properly restrict debugging functionality. An...

Input validation

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

RedHat Update for sssd RHSA-2015:2355-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 23 Update: tubo-5.0.15-3.fc23

The Libtubo library is small and simple function set to enable a process to run any other process in the background and communicate via the std-out, std-err and std-in file descriptors. This library is used by Rodent file-manager but is also available here for other programs to use freely...

Uber: Mass Assignment Vulnerability in partners.uber.com

A driver can change their full name into whatever they want after they are accepted into the Uber driver program. Once the uber driver is accepted, they can "Inspect Element" and change the profiles ... to contain the following information Same thing for last name. They will be given the...

NTP Buffer Overflow Vulnerability

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. NTP has a security vulnerability that allows a remote attacker to crash a background process by sending NTP packets when the program allows remote configuration...

NTP Denial of Service Vulnerability (CNVD-2015-07183)

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. NTP has a security vulnerability that allows a remote attacker to send Mode 6 MODECONTROL or Mode 7 MODEPRIVATE packets with large values to crash a background program...