3495 matches found
Apple OS X Server Denial of Service And User Enumeration Vulnerabilities
Apple OS X Server is prone to denial of service and user enumeration vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
[SECURITY] Fedora 26 Update: knot-resolver-1.2.4-1.fc26
The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...
OracleVM 3.3 / 3.4 : curl (OVMSA-2017-0059)
The remote OracleVM system is missing necessary patches to address critical security updates : - treat Negotiate authentication as connection-oriented CVE-2017-2628 - fix a bug in DNS caching code that causes a memory leak 1302893 - SSH: make CURLOPTSSHPUBLICKEYFILE treat '' as NULL 1260742 - use...
Password Field With Auto-Complete
In typical form-based web applications, it is common practice for developers to allow autocomplete within the HTML form to improve the usability of the page. With autocomplete enabled default, the browser is allowed to cache previously entered form values. For legitimate purposes, this allows the...
What You Need to Know About Caching Video Series
In this "unofficial" video series, Akamai Solutions Engineers Tedd Smith and CJ Arnesen explain the basics of caching: what it is, why it's important, and how to get the most out of it. A great introduction to Akamai, caching, and content delivery network CDN basics, this series supplements Akama...
QEMU: user-to-root privesc inside VM via bad translation caching
This is a security issue in the QEMU's system emulation for X86. The issue permits an attacker who can execute code in the guest ring 3 with normal user privileges to inject code into other processes that are running in guest ring 3, in particular root-owned processes. == reproduction steps ==...
[SECURITY] Fedora 25 Update: knot-resolver-1.2.4-1.fc25
The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...
MariaDB Server 5.5.x < 5.5.55 DoS
Binary data 9992.prm...
[SECURITY] Fedora 25 Update: knot-resolver-1.2.3-1.fc25
The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...
Windows Exploit development tutorial series--stack injection a-vulnerability warning-the black bar safety net
! Foreword Welcome to the heap spray tutorial the first part. This Part I will introduce the IE under typical heap spray technique, the second part will introduce the precise injection and IE8 under UAF vulnerabilities. It is worth mentioning that, the stack injection is just a payload Delivery...
bind security update
32:9.9.4-38.2 - Fix CVE-2017-3135 ISC change 4557 - Fix and test caching CNAME before DNAME ISC change 4558...
PYSEC-2017-34
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...
Design/Logic Flaw
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...
PYSEC-2017-34
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...
CVE-2016-9639
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...
CVE-2016-9639
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...
CVE-2016-9639
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...
UBUNTU-CVE-2016-9639
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...
CVE-2016-9639
CVE-2016-9639 affects Salt before 2015.8.11. The issue arises from caching behavior that allows deleted minions to read or write to other minions sharing the same id. Affected component: Salt minion management; root cause: improper handling of cached keys/minion identity. Impact per the provided ...
