CVE-2015-4797

Technical details about CVE-2015-4797 are not publicly available in the provided documents; monitor for updates.

CVE-2015-4824

CVE-2015-4824 is an Unspecified vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite 9.3.4. The impact is confidentiality, stated as affecting remote authenticated users; vectors are unknown. The NVD entry lists a low CVSS v2 base score (2.1) with network access a...

Juniper Junos IPv6 Packet Handling mbuf Chain Corruption DoS (JSA10699)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw related to the processing of IPv6 packets. An unauthenticated, remote attacker can exploit this, via a specially crafted IPv6 packet, to trigger an 'mbuf'...

CVE-2014-6450

CVE-2014-6450 affects Juniper Networks Junos OS when IPv6 is enabled. The vulnerability allows remote attackers to cause a denial of service via crafted IPv6 packets, leading to mbuf chain corruption and a kernel panic. Affected versions include Junos OS releases listed in the CVE description (e....

Mageia: Security Advisory (MGASA-2015-0274)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dyreza Dyre Trojan Phishing IT Supply Chain Credentials

The Dyreza Trojan long ago ceased its exclusive focus on stealing banking credentials, and has been blamed for its part in attacks against Salesforce.com customers, webhosts and registrars, online retailers and many more. Researchers at Proofpoint today published new information that indicates th...

Security Advisory - MITM Vulnerability in the OpenSSL Module of Huawei eSight Network

During certificate verification, OpenSSL starting from version 1.0.1n and 1.0.2b will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted...

Android Stagefright Media Playback Engine 远程代码执行漏洞

No description provided by source. !/usr/bin/env python Joshua J. Drake @jduck of ZIMPERIUM zLabs Shout outs to our friends at Optiv formerly Accuvant Labs C Joshua J. Drake, ZIMPERIUM Inc, Mobile Threat Protection, 2015 www.zimperium.com Exploit for RCE Vulnerability CVE-2015-1538 1 Integer...

Android Stagefright Remote Code Execution

!/usr/bin/env python Joshua J. Drake @jduck of ZIMPERIUM zLabs Shout outs to our friends at Optiv formerly Accuvant Labs C Joshua J. Drake, ZIMPERIUM Inc, Mobile Threat Protection, 2015 www.zimperium.com Exploit for RCE Vulnerability CVE-2015-1538 1 Integer Overflow in the libstagefright MP4 ‘sts...

Google Android - Stagefright Remote Code Execution

Google Android - Stagefright Remote Code Execution !/usr/bin/env python Joshua J. Drake @jduck of ZIMPERIUM zLabs Shout outs to our friends at Optiv formerly Accuvant Labs C Joshua J. Drake, ZIMPERIUM Inc, Mobile Threat Protection, 2015 www.zimperium.com Exploit for RCE Vulnerability CVE-2015-153...

Google Android - 'Stagefright' Remote Code Execution

!/usr/bin/env python Joshua J. Drake @jduck of ZIMPERIUM zLabs Shout outs to our friends at Optiv formerly Accuvant Labs C Joshua J. Drake, ZIMPERIUM Inc, Mobile Threat Protection, 2015 www.zimperium.com Exploit for RCE Vulnerability CVE-2015-1538 1 Integer Overflow in the libstagefright MP4 ‘sts...

Low: Red Hat Security Advisory: libunwind security update

Updated libunwind packages that fix a security flaw are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Linux kernel 'perf_callchain_user_64()' function denial of service vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux kernel. A local attacker can exploit this vulnerability to cause the kernel to enter an infinite loop, resulting in a...

[SECURITY] [DSA 3325-2] apache2 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3325-2 [email protected] https://www.debian.org/security/ Stefan Fritsch August 18, 2015 https://www.debian.org/security/faq -...

The vulnerability of the OpenSSL library, which allows a hacker to bypass the standard procedures for verifying certificate chains

The vulnerability of the X509verifycert function in the OpenSSL library is related to insufficient handling of the X.509 Basic Constraints cA value during the identification of an alternative certificate chain. Exploiting this vulnerability allows a malicious actor to bypass the standard...

One font vulnerability to rule them all #1: Introducing the BLEND vulnerability

Posted by Mateusz Jurczyk of Google Project Zero Last month, I presented parts of my PostScript font security research at the REcon security conference in Montreal, in a talk titled “One font vulnerability to rule them all: A story of cross-software ownage, shared codebases and advanced...

[SECURITY] Fedora 21 Update: libunwind-1.1-10.fc21

Libunwind provides a C ABI to determine the call-chain of a program...

Foxit Reader 7.1.5 Arbitrary Code Execution

Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage: https://www.foxitsoftware.com Software Link: https://www.foxitsoftware.com/downloads/ Version: 7.0.8 - 7.1.5 maybe also older versions tested...

Foxit Reader - .png Conversion Parsing tEXt Chunk Arbitrary Code Execution

Foxit Reader - .png Conversion Parsing tEXt Chunk Arbitrary Code Execution Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage: https://www.foxitsoftware.com Software Link:...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Agile PLM Framework Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile PLM Framework is one of the product lifecycle management PLM components. Oracle Agile PLM Framework is one...