CVE-2014-7936: Undefined Security Weakness

Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/locationbar/zoombubbleview.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted docume...

PT-2015-3969

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 Description The issue is related to a use-after-free vulnerability in the ZoomBubbleView::Close function. This vulnerability can be triggered by a crafted document, potentially leading to a denial o...

Linux/x86-64 - Add Map (127.1.1.1 google.lk) In /etc/hosts Shellcode (110 bytes)

Linux/x86-64 - Add Map 127.1.1.1 google.lk In /etc/hosts Shellcode 110 bytes. Shellcode exploit for Linuxx86-64 platform / ; Title: Add map in /etc/hosts file - 110 bytes ; Date: 2014-10-29 ; Platform: linux/x8664 ; Website: http://osandamalith.wordpress.com ; Author: Osanda Malith Jayathissa...

CVE-2014-4885

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4885

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4885

The CVE-2014-4885 entry concerns the CPWORLD Close Protection World Android app (com.tapatalk.closeprotectionworldcom) version 3.4.4. It is vulnerable because the app does not verify X.509 SSL certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive information via...

PT-2014-6189

Name of the Vulnerable Software and Affected Versions CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom version 3.4.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does...

CVE-2014-4885: Undefined Security Weakness

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

NoVirusThanks File Governor - Unlock locked files and folders

NoVirusThanks File Governor is an advanced program which allows for files and folders within the system to be unlocked so that normal file I/O operations can be completed when normally they would not be able to be due to operating system restrictions for files currently in use. Once a file or...

Sun JDK 1.1.x,Sun JRE 1.1.x Listening Socket Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the...

Sygate Personal Firewall Pro 5.5 - Local Fail-Close Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10540/info A vulnerability is reported to affect the Sygate Personal Firewall fail-closed functionality. It is reported that the kernel-space NDIS driver does not verify the origin of messages that are received through th...

Linux Kernel 2.6.x 'fasync_helper()' Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37806/info Linux kernel is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complet...

6Tunnel 0.6/0.7/0.8 Connection Close State Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3467/info 6tunnel is a freely available, open source software package designed to provide IPv6 functionality to hosts that do not comply with the standard. It works by creating IPv6 tunnels. A problem has been discovered ...

UBUNTU-CVE-2014-3956

The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program...

PT-2014-1706

Name of the Vulnerable Software and Affected Versions sendmail versions prior to 8.14.9 Description The issue exists in the sm close on exec function due to incorrect argument order and missing expected FD CLOEXEC flags. This allows local users to access high-numbered file descriptors using a...

CVE-2014-1321

Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching 1 a key or 2 the trackpad during a lid-close action...

PT-2014-4103

Name of the Vulnerable Software and Affected Versions Apple OS X versions 10.9.x through 10.9.2 Description The issue allows physically proximate attackers to bypass the intended transition into the locked-screen state. This can be achieved by touching either a key or the trackpad during a...

CVE-2014-1321: Undefined Security Weakness

Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching 1 a key or 2 the trackpad during a lid-close action...

PT-2013-4524

Name of the Vulnerable Software and Affected Versions Supermicro X9 generation motherboards with firmware before 3.15 SMT X9 315 Description The issue is related to multiple stack-based buffer overflows in the cgi/close window.cgi file within the web interface of the Intelligent Platform Manageme...

PT-2013-2656

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to an integer overflow in the alac decode close function, which can be triggered by a large number of samples per frame in Apple Lossless Audio Codec ALAC data. This leads to an...