CVE-2016-4087

Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of service or execute arbitrary code via crafted DNS packets...

CVE-2016-4087

CVE-2016-4087 affects Huawei S12700 switches pre-V200R008C00SPC500 and S5700 switches pre-V200R005SPH010. When the device Debug switch is on, processing crafted DNS packets can cause a denial of service or remote code execution due to an input validation/checksum vulnerability in the affected Hua...

Linux/x86-64 - Information Stealer Shellcode (399 bytes)

/ Title : Linux x8664 information stealer Date : 23-05-2016 Author : Roziul Hasan Khan Shifat Tested On : Ubuntu 14.04 LTS x8664 Contact : email protected / / How does this shellcode works ----------------------------------- 1. First it connects to the information reciver 2. then it download a sh...

Linux x86_64 Information Stealer Shellcode

Linux x8664 Information Stealer Shellcode. Shellcode exploit for linx86-64 platform / Title : Linux x8664 information stealer Date : 23-05-2016 Author : Roziul Hasan Khan Shifat Tested On : Ubuntu 14.04 LTS x8664 Contact : [email protected] / / How does this shellcode works...

Apple iOS Accessibility Buffer Overflow Vulnerability

Apple iOS is an operating system on Apple phones. A buffer overflow vulnerability exists in Accessibility in Apple iOS, which allows an attacker to exploit the vulnerability to execute arbitrary code with system privileges...

Apple OS X El Capitan Intel Graphics Driver Buffer Overflow Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. A buffer overflow vulnerability in Intel Graphics Driver in Apple OS X El Capitan allows attackers to exploit the vulnerability to execute arbitrary code with kernel privileges...

IBM Domino Authentication Bypass Vulnerability

IBM Domino is a suite of platforms for hosting social business applications from IBM in the United States. An unspecified security vulnerability exists in IBM Domino, which allows remote attackers to bypass the authentication process and execute arbitrary code with system privileges...

CVE-2016-1859

The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-1848

QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file...

CVE-2016-1848

QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file...

CVE-2016-1850

SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file...

CVE-2016-1854

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1855, CVE-2016-1856, and CVE-2016-1857...

CVE-2016-1857

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856...

FreeBSD -- Incorrect argument handling in sendmsg(2)

Problem Description: Incorrect argument handling in the socket code allows malicious local user to overwrite large portion of the kernel memory. Impact: Malicious local user may crash kernel or execute arbitrary code in the kernel, potentially gaining superuser privileges...

CVE-2015-4604

The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service application crash or possibly...

Tiny Tiny RSS SQL Injection Vulnerability

A blind injection vulnerability exists in $itemid in Tiny Tiny RSS processcategoryorder. An attacker is able to connect to the library database and execute database statements...

CVE-2016-2196

Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service memory overwrite and crash or execute arbitrary code via unspecified vectors...

CVE-2016-2196

Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service memory overwrite and crash or execute arbitrary code via unspecified vectors...

Microsoft Windows HVCI Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in Microsoft Windows 10 Gold and 1511, which stems from a program failing to properly allow certain kernel-mode pages to be marked as Read, Write, and Execute RWX....

Debian DLA-464-1 : libav security update

It was discovered that there was a use-after free vulnerability in libav, a multimedia player, server, encoder and transcoder library. The segwritepacket function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause...