MariaDB Server 10.1.x < 10.1.14 Multiple Vulnerabilities

Binary data 9453.prm...

PT-2016-2554

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 Description The issue is related to the improper management of the MANAGE USERS and CREATE USERS permissions in the Shell componen...

Android Privilege Escalation

The vulnerability of the createpbuf function in the Bluetooth operating system component of the Android device is due to buffer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges by initiating device connection processes...

Atutor Arbitrary File Disclosure Vulnerability

ATutor is ATutor team developed a set of open source Web-based learning content management system . An arbitrary file disclosure vulnerability exists in Atutor. When saving data information, due to the "icon" HTTP POST passed to the "/mods/core/courses/users/createcourse.php" script, which fails ...

PT-2016-6174

Name of the Vulnerable Software and Affected Versions Vtiger CRM versions 6.4.0 and earlier Description The issue concerns the modules/Users/actions/Save.php file in Vtiger CRM, which does not properly restrict user-save actions. This allows remote authenticated users to create or modify user...

CVE-2016-4834: Undefined Security Weakness

modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user-save actions, which allows remote authenticated users to create or modify user accounts via unspecified vectors...

[SECURITY] Fedora 24 Update: php-pecl-zip-1.13.4-1.fc24

Zip is an extension to create and read zip files...

Vtiger CRM does not properly restrict access to application data

Overview Vtiger CRM is a customer relationship management CRM software. Vtiger CRM contains a vulnerability where it does not properly restrict access to user information data. Hirota Kazuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with th...

Pixman DoS Execution

The vulnerability of the createbits function in the Pixman-bits-image.c library is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure termination of the application or execute arbitrary code...

PT-2016-6298

Name of the Vulnerable Software and Affected Versions c-ares versions 1.x before 1.12.0 Description The issue is related to a heap-based buffer overflow in the ares create query function, which can be triggered by a remote attacker using a hostname with an escaped trailing dot. This can lead to a...

PT-2016-2474

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android 5.0.x versions prior to 5.0.2 Android 5.1.x versions prior to 5.1.1 Android 6.x versions prior to 2016-07-01 Description The issue is caused by a buffer overflow in the create pbuf function in the...

Apache struts2 devMode Remote Code Execution Vulnerability

Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications . Apache struts2 devMode remote code execution vulnerability , the vulnerability i...

Linux/x86 - TCP Reverse Shellcode (75 bytes)

/ Linux x86 TCP Reverse Shellcode 75 bytes Author: sajith Tested on: i686 GNU/Linux Shellcode Length: 75 SLAE - 750 ------------c prog ---poc by sajith shetty---------- include include include include int mainvoid int sockfiledes; struct sockaddrin sockad; //1 create socket connection //Man page:...

CUPS Printing Server Code Execution

The vulnerability of the addjob function in the scheduler/ipp.c file of the CUPS printing server is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to modify the device configuration file remotely or execute arbitrary code using specially crafted...

Microsoft Office Data Compromise

A vulnerability that allows for remote execution of code exists in Microsoft Office and is related to the processing of certain properties of Microsoft Word files. If a user with administrative privileges accesses the system, a malicious individual can gain full control over the system. They can...

SeaMonkey Data Compromise

The use of this function after release in nsTextEditRules::CreateMozBR in Mozilla Firefox, Firefox ESR, and Thunderbird allows malicious actors operating remotely to execute arbitrary code or cause service failures errors in handling dynamic memory...

Firefox ESR Data Compromise

The use of this function after release in nsTextEditRules::CreateMozBR in Mozilla Firefox ESR allows malicious actors operating remotely to execute arbitrary code or cause service failures errors in handling dynamic memory...

Google Chrome DoS

Google Chrome browser contains a vulnerability related to integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/rendererhost/media/audioinputrendererhost.cc. Exploiting this vulnerability allows malicious actors to cause service failures or other effects on th...

[SECURITY] Fedora 23 Update: php-pecl-zip-1.13.3-1.fc23

Zip is an extension to create and read zip files...

SSH Key Persistence

This module will add an SSH key to a specified user or all, to allow remote login via SSH at any time. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sshkey' class MetasploitModule 'SSH Key Persistence',...