Wireshark DEC DNA Routing Protocol Parser Remote Denial of Service Vulnerability

Wireshark is an open source network protocol analysis tool. A remote denial of service vulnerability exists in the Wireshark DEC DNA Routing Protocol parser, which can be exploited by an attacker to crash an affected application and deny service to legitimate users...

[SECURITY] [DLA 118-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze10 CVE ID : CVE-2014-3185 CVE-2014-3687 CVE-2014-3688 CVE-2014-6410 CVE-2014-7841 CVE-2014-8709 CVE-2014-8884 Non-maintainer upload by the Squeeze LTS and Kernel Teams. New upstream stable release 2.6.32.65, see http://lkml.org/lkml/2014/12/13/81 for...

[USN-2441-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-2441-1 December 12, 2014 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

DLA-118-1 linux-2.6 - security update

Bulletin has no description...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Dec 2014) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2443-1)

An information leak in the Linux kernel was discovered that could leak the high 16 bits of the kernel stack address on 32-bit Kernel Virtual Machine KVM paravirt guests. A user in the guest OS could exploit this leak to obtain information that could potentially be used to aid in attacking the...

USN-2444-1: Linux kernel (OMAP4) vulnerabilities

Rabin Vincent, Robert Swiecki, Russell King discovered that the ftrace subsystem of the Linux kernel does not properly handle private syscall numbers. A local user could exploit this flaw to cause a denial of service OOPS. CVE-2014-7826 Rabin Vincent, Robert Swiecki, Russell Kinglaw discovered a...

USN-2443-1: Linux kernel vulnerabilities

Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack Segment SS register in the x86 architecture. A local attacker could exploit this flaw to gain administrative privileges. CVE-2014-9322 An information leak in the Linux kernel was discovered...

USN-2441-1: Linux kernel vulnerabilities

An information leak in the Linux kernel was discovered that could leak the high 16 bits of the kernel stack address on 32-bit Kernel Virtual Machine KVM paravirt guests. A user in the guest OS could exploit this leak to obtain information that could potentially be used to aid in attacking the...

Debian DSA-3093-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation : - CVE-2014-7841 Liu Wei of Red Hat discovered that a SCTP server doing ASCONF will panic on malformed INIT chunks by triggering a NULL pointer dereference. - CVE-2014-83...

Debian Security Advisory DSA 3093-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation: CVE-2014-7841 Liu Wei of Red Hat discovered that a SCTP server doing ASCONF will panic on malformed INIT chunks by triggering a NULL pointer dereference. CVE-2014-8369 A...

CVE-2014-8884

Stack-based buffer overflow in the ttusbdecfedvbsdiseqcsendmastercmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service system crash or possibly gain privileges via a large message length in an ioctl call...

PhpWiki - Remote Command Execution

PhpWiki - Remote Command Execution / / / / / / // / / / / / / / \ | /| / / / /// / / / // / // / / // / / / / // / |/ |/ / / ,&2;'+cmd+' 1&2;echo ':::'123 1&2;" -prefab= -csmap= data= alt= help= ','editpreview','Preview','action','edit' cmd1 = urllib2.Requestdomain +'/index.php/HeIp',data cmd2...

Threat Outbreak Alert RuleID8337: Email Messages Distributing Malicious Software on December 23, 2014

Medium Alert ID: 35450 First Published: 2014 August 27 18:11 GMT Last Updated: 2014 December 24 12:54 GMT Version: 33 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID8337K...

eWebquiz 8 - Blind SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: multi Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: eWebquiz v 8 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00 am ? Home: WwW.xP10.ME ?...

Veritas Backup Exec Name Service Overflow

No description provided by source. $Id: nameservice.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Active Auction House 3.6 - Blind SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: wishlist.asp catid Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Auction House v 3.6 author: R3d-D3v!L Date: 17.dec.2009 T!ME: 10:...

DESlock+ <= 3.2.6 DLMFENC.sys Local Kernel ring0 link list zero PoC

No description provided by source. / deslock-list-zero.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel ring0 link list zero POC by mu-b - Fri 21 Dec 2007 - Tested on: DLMFENC.sys 1.0.0.26 - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ -- Digit-Labs...

Charon Cart 3.0 - (ContentID) Blind SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: reviewupdate.asp ContentID Blind SQL Injection Vulnerability Vendor: www.charon.co.uk Software: charoncartv3 author: R3d-D3v!L Date: 17.dec.2009 T!ME: 4:46 am ? Home:...

gAlan 0.2.1 - Buffer Overflow Exploit

No description provided by source. $Id: galanfileformatbof.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...