Google Chrome HTML Injection Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the page serializer of Google Chrome versions prior to 47.0.2526.73, which stems from the program's failure to properly handle Mark of the Web MOTW annotations for URLs containing th...

UBUNTU-CVE-2015-6784

The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...

linux/x86 exec('/bin/dash') - shellcode 45 bytes

/ Title: Linux/x86 exec'/bin/dash' - shellcode 45 bytes Platform: linux/x8664 Date: 2015-06-15 Author: Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es Twitter : https://twitter.com/rezesp FaceBook :...

linux/x86 exec ('/bin/dash') - shellcode 45 bytes

/ Title: Linux/x86 exec'/bin/dash' - shellcode 45 bytes Platform: linux/x8664 Date: 2015-06-15 Author: Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es Twitter : https://twitter.com/rezesp FaceBook :...

BisonWare FTP Server 3.5 Buffer Overflow Exploit

BisonWare FTP Server version 3.5 buffer overflow proof of concept exploit for Windows XP SP3. !/usr/bin/python Exploit Title: BisonWare FTP Server Version 3.5 Egg Hunting Exploits Date: 22 April,2015 Exploit Author: Bikash Dash www.vulnerableghost.com Version: BisonWare FTP Server Version 3.5...

DLA-217-1 xdg-utils - security update

Bulletin has no description...

DEBIAN-CVE-2015-0885

checkpw 1.02 and earlier allows remote attackers to cause a denial of service infinite loop via a -- dash dash in a username...

UBUNTU-CVE-2015-0885

checkpw 1.02 and earlier allows remote attackers to cause a denial of service infinite loop via a -- dash dash in a username...

PT-2015-3406

Name of the Vulnerable Software and Affected Versions xdg-utils version 1.1.0 rc1 Description The issue is related to the open generic xdg mime function in xdg-open, which does not properly handle local variables when using dash. This allows remote attackers to execute arbitrary commands via a...

USN-2455-1 bsd-mailx vulnerability

It was discovered that bsd-mailx contained a feature that allowed syntactically valid email addresses to be treated as shell commands. A remote attacker could possibly use this issue with a valid email address to execute arbitrary commands. This functionality has now been disabled by default, and...

CVE-2014-6945

The Neeku Naaku Dash Dash aka com.dakshaa.nndd application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Neeku Naaku Dash Dash aka com.dakshaa.nndd application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6945

The Neeku Naaku Dash Dash aka com.dakshaa.nndd application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6945

The CVE-2014-6945 entry concerns the Android app Neeku Naaku Dash Dash (com.dakshaa.nndd) version 1.0, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in SSL/TLS, enabling man-in-the-middle attackers to spoof servers and obtain sensitive infor...

CVE-2014-6945: Undefined Security Weakness

The Neeku Naaku Dash Dash aka com.dakshaa.nndd application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

linux/x86 execve(/bin/dash) 42 bytes

No description provided by source. / linux/x86 execve/bin/dash 42 bytes Author : X-h4ck [email protected], [email protected] www.pirate.al , www.flashcrew.in Greetz : mywisdom - Danzel - Wulns - IllyrianWarrior- Ace - M4yh3m - Saldeath ev1lut1on - Lekosta - Pretorian - bi0 - Slimshaddy - d3trimentaL ...

openSUSE Security Update : miniupnpc (openSUSE-SU-2014:0815-1)

miniupnpc was updated to 1.9 to fix a potential buffer overrun in miniwget.c CVE-2014-3985. Besides that the following issues were fixed : - added argument remoteHost to UPNPGetSpecificPortMappingEntry - increment APIVERSION to 10 - --help and -h arguments in upnpc.c - define MAXHOSTNAMELEN if no...

CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

PT-2014-5143

Name of the Vulnerable Software and Affected Versions Unity versions prior to 7.2.1 Description The issue allows physically proximate attackers to bypass the lock screen and execute arbitrary commands when the lock screen is active. This can be achieved by pressing the SUPER key before the screen...