[SECURITY] Fedora 21 Update: jasper-1.900.1-30.fc21

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ FreeBSD Kernel Multiple Vulnerabilities 1. Advisory Information Title: FreeBSD Kernel Multiple Vulnerabilities Advisory ID: CORE-2015-0003 Advisory URL: http://www.coresecurity.com/content/freebsd-kernel-multiple-vulnerabilities...

Drupal Ubercart Currency Conversion Module Open Redirect Vulnerability

Drupal is a free and open source content management system developed in PHP. An open redirection vulnerability exists in the Drupal Ubercart Currency Conversion module due to the application failing to properly process user-supplied input. An attacker is allowed to exploit this vulnerability to...

FreeBSD Kernel Multiple Vulnerabilities

Exploit for freebsd platform in category dos / poc FreeBSD Kernel Multiple Vulnerabilities 1. Advisory Information Title: FreeBSD Kernel Multiple Vulnerabilities Advisory ID: CORE-2015-0003 Advisory URL: http://www.coresecurity.com/content/freebsd-kernel-multiple-vulnerabilities Date published:...

FreeBSD Patches Kernel Bugs

Developers behind the operating system FreeBSD patched a handful of vulnerabilities in its kernel code yesterday that could have enabled an attacker to crash the system, execute arbitrary code, or disclose sensitive kernel memory. FreeBSD patched the bugs fairly quickly. Francisco Falcon, a membe...

FreeBSD Kernel Multiple Vulnerabilities

1. Advisory Information Title: FreeBSD Kernel Multiple Vulnerabilities Advisory ID: CORE-2015-0003 Advisory URL: www.coresecurity.com/core-labs/advisories/freebsd-kernel-multiple-vulnerabilities Date published: 2015-01-27 Date of last update: 2015-01-27 Vendors contacted: FreeBSD Release mode:...

Oracle Solaris Third-Party Patch Update : django (multiple_vulnerabilities_in_django)

The remote Solaris system is missing necessary patches to address security updates : - The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules ...

SA-CONTRIB-2015-019 - Ubercart Currency Conversion - Open Redirect

This module enables users to change the currency of Ubercart products. When switching the currency, the user is redirected to a page specified in the destination query parameter. The module was not checking that the passed argument was an internal URL, thereby leading to an open redirect...

Xion-Player-1.0.125

Script provided as is without any warranty. Use for educational purposes only. Do not use this code to do anything illegal ! Corelan does not want anyone to use this script outputfile="corelanc0d3r.m3u" offsettonseh=250 affected by the m3u path length ! junk = "A" offsettonseh nseh="\x41\x45"...

[SECURITY] Fedora 19 Update: jasper-1.900.1-26.fc19

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 20 Update: jasper-1.900.1-27.fc20

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

Blade-API-Monitor-Unicode-Bypass

This is a super strange exploit. First I would like to commend "FullMetalFouad" for the unicode work on the original exploit. Originally I wanted to see if I could simplify the process. While I was doing that I lost sight of the fact that the instructions had to be printable since we need to copy...

[SECURITY] Fedora 21 Update: hivex-1.3.11-4.fc21

Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' lets you export and merge to the textual...

DEBIAN-CVE-2014-6040

GNU C Library aka glibc before 2.20 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via a multibyte character value of "0xffff" to the iconv function when converting 1 IBM933, 2 IBM935, 3 IBM937, 4 IBM939, or 5 IBM1364 encoded data to UTF-8...

CVE-2012-6656

iconvdata/ibm930.c in GNU C Library aka glibc before 2.16 allows context-dependent attackers to cause a denial of service out-of-bounds read via a multibyte character value of "0xffff" to the iconv function when converting IBM930 encoded data to UTF-8...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the improper use of a reflection-based approach to type conversion. An attacker can execute arbitrary code via a crafted serialized object. Details Serialization is a process of converting an...

openSUSE Security Update : claws-mail (openSUSE-SU-2014:1384-1) (POODLE)

Claws Mail was updated to version 3.11.0. Changes : + SSLv3 server connections are now disabled by default, in response to the POODLE vulnerability CVE-2014-3566. + Several PGP/Core plugin improvements : - Indicate when a key has been revoked or has expired when displaying signature status. - Whe...

逐浪CMS2个文件两个注入5处问题代码 另附其他注入绕过方式

简要描述： 厂商目前在安全方面已经下狠功夫了，虽然很多都参数化了以及数据类型的转换 但是难免会有遗漏，还望继续努力 详细说明： 注入点一 ： 文件 User/UserZone/StructView.aspx 参数：ID 后台代码片段： None 漏洞证明： 注入一 注入二...

74cms(20141020)全局SQL注入过滤绕过

简要描述： 74cmsv3.5.120141020 绕过全局SQL注入过滤。 详细说明： WooYun: 74cms 最新版 注入8-9 报道过74cms转换编码导致的SQL注入的问题，是由于使用了iconv函数导致的，74cms做了修正，转而使用了自定义的函数utf8togbk来转换编码，代码如下： function utf8togbk$utfstr global $UC2GBTABLE; $okstr = ''; ifempty$UC2GBTABLE define'CODETABLEDIR',...

Microsoft Internet Explorer ConvertBitmaptoPng Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. In addition, the user must allow the...