Denial of service

A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vulnerability, a remote user must be able to establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame which will cause it to segfault and...

CVE-2017-15699

Apache Qpid Dispatch Router (versions 0.7.0 and 0.8.0) is affected by a Denial of Service vulnerability. A remote attacker who can establish an AMQP connection can send a crafted AMQP frame that triggers a segfault, causing the router to crash/shut down. Exploitation is network-based and does not...

CVE-2017-15699

A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vulnerability, a remote user must be able to establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame which will cause it to segfault and...

CVE-2017-15699: Improper Input Validation

A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vulnerability, a remote user must be able to establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame which will cause it to segfault and...

PT-2018-5977 · Apache · Apache Qpid Dispatch Router

Name of the Vulnerable Software and Affected Versions: Apache Qpid Dispatch Router versions 0.7.0 through 0.8.0 Description: A Denial of Service issue was found in the software. To exploit this, a remote user must establish an AMQP connection to the Qpid Dispatch Router and send a specifically...

OpenEMR fax_dispatch.php file OS command injection vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An operating system command injection vulnerability exists in the...

Threat Outbreak Alert RuleID31311: Email Messages Distributing Malicious Software on November 15, 2017

Medium Alert ID: 55935 First Published: 2017 November 15 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31311 may contain the following files: Name |...

CVE-2017-15699

A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vulnerability, a remote user must be able to establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame which will cause it to segfault and...

python security and bug fix update

2.7.5-58.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-58 - Set stream to None in case an open fails. Resolves: rhbz1432003 2.7.5-57 - Fix implicit declaration warnings of functions added by patches 147 and 265 Resolves: rhbz1441237 2.7.5-56 - Fix shutil.makearchive...

WebKit - enqueuePageshowEvent enqueuePopstateEvent Universal Cross-Site Scripting

WebKit - enqueuePageshowEvent enqueuePopstateEvent Universal Cross-Site Scripting view-frame.page; frame.tree.appendChildchildFrame-view-frame; childFrame-open; enqueuePageshowEventPageshowEventPersisted; HistoryItem historyItem = frame.loader.history.currentItem; if historyItem &&...

Microsoft Windows 7 Kernel - win32k!xxxClientLpkDrawTextEx Stack Memory Disclosure

Microsoft Windows 7 Kernel - win32k!xxxClientLpkDrawTextEx Stack Memory Disclosure / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1182 We have discovered that it is possible to disclose portions of uninitialized kernel stack memory to user-mode applications in Windows 7 other...

login.yorkdispatch.com XSS vulnerability

Vulnerable URL: https://login.yorkdispatch.com/PPYD-GUP/password-forgot/?cancel-url="/alert/openbugbounty/...

flash-plugin: multiple code execution issues fixed in APSB17-07

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution...

UBUNTU-CVE-2017-2994

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution...

login.yorkdispatch.com XSS vulnerability

Vulnerable URL: https://login.yorkdispatch.com/PPYD-GUP-ET/authenticate/?from-state=returning-user-get-redirect%27%22--%3E%3C/Title/%3E%3C/Script/%3E%3CSvg%20/Onload=confirmOPENBUGBOUNTY%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:|...

python security, bug fix, and enhancement update

2.7.5-48.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-48 - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359164 2.7.5-47 - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.getdata Resolves: rhbz1356364 2.7.5-46 - Drop patch 2...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Email Center Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's fully integrated set of global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle Email Center is one of the e-mail respon...

Uber: private passenger information is exposed to the Uber Driver app during ride dispatch ("Ping") events

This report highlighted that the Uber Driver app did not anonymize the last name and phone number of the rider...

kensoft CMS SQL Injection Vulnerability

kensoft CMS is a content management system. A SQL injection vulnerability exists in the ft parameter of the dispatch.php page of kensoft Cms, which can be exploited by attackers to obtain sensitive information...

Concrete5 5.7.3.1 - (Application::dispatch) Local File Inclusion

Exploit for php platform in category web applications ------------------------------------------------------------------------------- Concrete5 installed 329. $response = $this-getEarlyDispatchResponse; 330. 331. if !isset$response 332. $collection = Route::getList; 333. $context = new...