PT-2014-1801

Name of the Vulnerable Software and Affected Versions lxml versions prior to 3.3.5 Description The issue is related to an incomplete blacklist vulnerability in the lxml.html.clean module, which allows remote attackers to conduct cross-site scripting XSS attacks via control characters in the link...

UBUNTU-CVE-2014-3146

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting XSS attacks via control characters in the link scheme to the cleanhtml function...

cups-filters code execution

cups-browsed shell characters vulnerabiilty...

InvisionPower CMS Links To Titles 3.0 Cross Site Scripting

InvisionPower cms Links to Titles utility Presistent XSS =========================================== Author: UmPire Version: 3.0 Full details for version 3.1 patch is not mentioned. It's suspicious to affect all versions. Vendor URL: http://invisionpower.com Product URL:...

Nagios Remote Plugin Executor Command Injection

A command injection vulnerability has been found in Nagios Remote Plugin Executor. The vulnerability is due to insufficient validation of user-provided parameters containing newline characters. A remote, unauthenticated attacker could exploit this vulnerability to execute arbitrary commands on th...

Security advisory for Bugzilla 4.5.3, 4.4.3, 4.2.8, and 4.0.12

Summary ======= Bugzilla is a Web-based bug-tracking system used by a large number of software projects. The following security issues have been discovered in Bugzilla: The login form had no CSRF protection, meaning that an attacker could force the victim to log in using the attacker's credential...

Remote Command Injection

Unsanitized input is passed to the shell. A malicious user can inject shell commands by sending shell meta characters like ';' in some variables...

Fedora 20 : bugzilla-4.2.9-1.fc20 (2014-5433)

Previous versions of bugzilla had the following security issues : - The login form had no CSRF protection, meaning that an attacker could force the victim to log in using the attacker's credentials. - Dangerous control characters can be inserted into Bugzilla, notably into bug comments, which can...

Fedora 19 : bugzilla-4.2.9-1.fc19 (2014-5414)

Previous versions of bugzilla had the following security issues : - The login form had no CSRF protection, meaning that an attacker could force the victim to log in using the attacker's credentials. - Dangerous control characters can be inserted into Bugzilla, notably into bug comments, which can...

Code injection

Simple Machines Forum SMF 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username...

Amazon Linux AMI : perl-YAML-LibYAML (ALAS-2014-324)

The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow...

FreeBSD : bugzilla -- Social Engineering (60bfa396-c702-11e3-848c-20cf30e32f6d)

A Bugzilla Security Advisory reports : Dangerous control characters can be inserted into Bugzilla, notably into bug comments. If the text, which may look safe, is copied into a terminal such as xterm or gnome-terminal, then unexpected commands could be executed on the local machine. %NASLMINLEVEL...

NRPE 2.15 - Remote Command Execution

NRPE 2.15 - Remote Command Execution ============================================= - Release date: 17.04.2014 - Discovered by: Dawid Golunski - Severity: High ============================================= I. VULNERABILITY ------------------------- NRPE - Nagios Remote Plugin Executor = 2.15 Remot...

WhatsApp Messenger for iOS非打印字符处理远程拒绝服务漏洞

WhatsApp（WhatsAppmessenger）是一款目前可供iPhone手机、Android手机、Windows Phone手机、WhatsApp Messenger、Symbian手机和黑莓手机用户使用的、用于智能手机之间通讯的应用程序。 WhatsApp Messenger for iOS处理消息中的非打印字符存在安全漏洞，允许远程攻击者利用漏洞使应用程序崩溃。 0 WhatsApp 2.11.7 WhatsApp 2.11.8版本已修复该漏洞，建议用户下载使用： http://www.whatsapp.com/ !/usr/bin/python -- coding: utf...

OpenJDK: javac does not ignore certain ignorable characters (Javadoc, 8016653)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc...

bugzilla -- Social Engineering

A Bugzilla Security Advisory reports: Dangerous control characters can be inserted into Bugzilla, notably into bug comments. If the text, which may look safe, is copied into a terminal such as xterm or gnome-terminal, then unexpected commands could be executed on the local machine...

Authentication flaw

The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00BFQ.6C0 allows remote attackers to bypass authentication by using %2F sequences in place of / slash characters...

lxml Filter Bypass

Hi, all I've accidentally found vulnerability in cleanhtml function of lxml python library. User can break schema of url with nonprinted chars \x01-\x08. Seems like all versions including the latest 3.3.4 are vulnerable. Here is PoC. from lxml.html.clean import cleanhtml html = '''\ aaa bbb bbb b...

Medium: file

Issue Overview: The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service CPU consumption via a crafted ASCII file that triggers a...

CVE-2014-1725

The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service out-of-bounds read via a window.atob...