Python 1.5.2 Pickle Unsafe eval() Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5255/info Python is an open source, object oriented programming language. The Python Pickle module is provided to convert object variables into a serialized form pickling, and later recover the data back into an object...

Windows NT - User Mode to Ring 0 Escalation Vulnerability

No description provided by source. Microsoft Windows NT GP Trap Handler Allows Users to Switch Kernel Stack ------------------------------------------------------------------------- CVE-2010-0232 In order to support BIOS service routines in legacy 16bit applications, the Windows NT Kernel support...

Microsoft Internet Explorer 5.0.1 JavaScript Method Assignment Cross-Domain Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10689/info A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itself due to a failure to properly validate trust...

Solaris <= 7.0 Recursive mutex_enter Panic Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an active listening port and the serv...

Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Services.exe Denial of Service (1)

No description provided by source. source: http://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will crash the services executable, which in turn,...

Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow Vulnerability (DoS)

Summary Spark Browser is a free Internet browser with very sharp UIs and cool utilities. It's based on the Chromium technology platform, giving it fast browsing capabilities. Description Spark Browser version 26.5.9999.3511 allows remote attackers to cause a denial of service application crash...

FTC Asking DEF CON to Help Catch Robocallers

The United States Federal Trade Commission is sick and tired of illegal robocalling, and it’s hosting a contest this year at the DEF CON hacker conference in Las Vegas in an attempt to do something about it. The consumer protection agency’s weariness likely stems from the more than 150,000...

Hooker - Automated Dynamic Analysis of Android Applications

Hooker is an opensource project for dynamic analysis of Android applications. This project provides various tools and applications that can be use to automaticaly intercept and modify any API calls made by a targeted application. It leverages Android Substrate framework to intercept these calls a...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0311-1)

several API calls did not honor the read-only flag connections. Attackers could exploit that to modify the state of the system or potentially execute code CVE-2011-1146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Null pointer dereference

The 1 execve and 2 fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service triple-fau...

CVE-2014-3880

Removed by vendor...

CVE-2014-3880

The 1 execve and 2 fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and mappings for a process before all threads have terminated, which allows local users to cause a denial of service triple-fau...

CVE-2014-3880

CVE-2014-3880 affects the FreeBSD kernel: executing a new image can destroy the calling process’s virtual memory space before all threads terminate, dereferencing an invalid page table pointer and triggering a triple fault leading to a reboot. Affected: FreeBSD 8.4 (before p11), 9.1 (before p14),...

Mozilla to Provide WebRTC-based Free Firefox To Firefox Voice and Video Calling feature

Mozilla is planning to provide a new feature that will allow free audio and video calls between its Firefox web browser, thereby ending the need of any third-party client service or plugin. Mozilla will soon release a new experimental version of Firefox Nightly, which will include an open source...

CVE-2014-0237

The cdfunpacksummaryinfo function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service performance degradation by triggering many fileprintf calls...

Moderate: Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update

Updated openstack-nova packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring...

Adobe Acrobat and Reader API Calls Code Execution (APSB14-15; CVE-2014-0525)

A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Reader handles certain API calls to unmapped memory that could lead to code execution. A remote attacker can exploit this issue by enticing a target user to open a specially...

Adobe Acrobat Multiple Vulnerabilities - 01 (May 2014) - Windows

Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...

CVE-2014-0525

The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped memory, which allows attackers to execute arbitrary code via unspecified API calls...

Cuckoo Sandbox v1.1 - Automated Malware Analysis

Cuckoo Sandbox is a malware analysis system. It simply means that you can throw any suspicious file at it and in a matter of seconds Cuckoo will provide you back some detailed results outlining what such file did when executed inside an isolated environment. Cuckoo generates a handful of differen...