1585 matches found
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-00625)
MySQL is an open source relational database management system. A security vulnerability exists in the Server : DDL subcomponent of Oracle MySQL, which allows remote attackers to exploit the vulnerability to affect the availability of the system...
CVE-2015-0391
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL...
PT-2014-8378
Name of the Vulnerable Software and Affected Versions Cisco ISB8320-E High-Definition IP-Only DVR affected versions not specified Description The issue allows remote attackers to bypass authentication by establishing a TELNET session during a recovery boot. Recommendations At the moment, there is...
CVE-2014-8006: Improper Authentication
The Disaster Recovery DRA feature on the Cisco ISB8320-E High-Definition IP-Only DVR allows remote attackers to bypass authentication by establishing a TELNET session during a recovery boot, aka Bug ID CSCup85422...
CVE-2014-8006
The Disaster Recovery DRA feature on the Cisco ISB8320-E High-Definition IP-Only DVR allows remote attackers to bypass authentication by establishing a TELNET session during a recovery boot, aka Bug ID CSCup85422...
mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL...
mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL...
mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL...
Java: Java XML Signature DoS Attack
It was discovered that the Apache Santuario XML Security for Java project allowed Document Type Definitions DTDs to be processed when applying Transforms even when secure validation was enabled. A remote attacker could use this flaw to exhaust all available memory on the system, causing a denial ...
Framework: Information disclosure via SSRF
It was found that the Spring Framework did not, by default, disable the resolution of URI references in a DTD declaration when processing user-provided XML documents. By observing differences in response times, an attacker could identify valid IP addresses on the internal network with functioning...
From the parsing perspective analysis of the Shellshock Vulnerability[CVE-2 0 1 4-6 2 7 1]-vulnerability warning-the black bar safety net
Author: yaoxi Documentation This time, we combined The poc analysis to know about the Bash syntax rules, from another angle to help everyone better understand the bash and the shellshock vulnerability. Vulnerability description CVE-2 0 1 4-6 2 7 1 vulnerability is Stéphane Hassles France found th...
bash security update
3.0-27.0.3 - Rework env function definition for safety Florian Weimer CVE-2014-7169...
GNU Bash - Shellshock Environment Variable Command Injection
GNU Bash - Shellshock Environment Variable Command Injection Exploit Database Note: The following is an excerpt from: https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ Like “real” programming languages, Bash has functions, though in a...
BurpSentintel - GUI Burp Plugin to ease discovering of security holes in web applications
A plugin for Burp Intercepting Proxy, to aid and ease the identification of vulnerabilities in web applications. Searching for vulnerabilities in web applications can be a tedious task. Most of the time consists of inserting magic chars into parameters, and looking for suspicious output. Sentinel...
PT-2014-7265 · Oracle +6 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.38 and earlier Description: The issue allows remote authenticated users to affect availability via vectors related to SERVER:DDL. This means that authenticated users can potentially impact the system's...
RHEL 6 : condor (RHSA-2013:1172)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1172 advisory. HTCondor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority...
Sun ONE Unified Development Server 5.0 Recursive Document Type Definition Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6626/info It has been reported that problems with the handling of recursive document type definitions DTDs occur in Sun ONE Unified Development Server UDS. When a document is uploaded containing these types of constructs,...
Maligno - Penetration Testing Tool that Serves Metasploit Payloads
Maligno is an open source penetration testing tool that serves Metasploit payloads. It generates shellcode with msfvenom and transmits it over HTTP or HTTPS. The shellcode is encrypted with AES and encoded with Base64 prior to transmission. Changelog: Metasploit multi-host support, socks4a server...
Security vulnerability concepts and classification-vulnerability warning-the black bar safety net
Author: Wang column army This is a security vulnerability related to the science, introducing a security vulnerability concept, vulnerability in several dimensions of classification and examples show. Security vulnerability and related concepts This section describes what is a security...
Samba Root File System Access Security Bypass (CVE-2009-0022)
A security bypass vulnerability exists in Samba. The vulnerability is due to a design weakness when registry based share definition is enabled. A remote attacker may leverage this vulnerability to gain read-only access to the local file system in the security context of the Samba service...