CVE-2016-3707

The icmpchecksysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Ech...

CVE-2016-3707

The icmpchecksysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Ech...

KLA10836 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF

Multiple serious vulnerabilities have been found in multiple Foxit products. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Use-after-free vulnerability can be...

Arbitrary Command Execution Vulnerability in a System of China Soft Technology

Ltd. is a product of the implementation of the pilot project of knowledge innovation by the Institute of Software of the Chinese Academy of Sciences, and is the result of the restructuring of the main body of the Institute's technological research and development. An arbitrary command execution...

CVE-2015-7988

The handleregservicerequest function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2016-4802

Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 security.dll, 2 secur32.dll, or 3 ws232.dll in the application or current...

CVE-2016-4994

Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted XCF file...

Windows XP - 10 - Download & Execute Shellcode

Windows XP - 10 - Download & Execute Shellcode. Shellcode exploit for windows platform / + Author : B3mB4m Contact : [email protected] Project : https://github.com/b3mb4m/shellsploit-framework Greetz : Bomberman,T-Rex,Pixi ----------------------------------------------------------- Tested on ...

CVE-2016-4817

lib/http2/connection.c in H2O before 1.7.3 and 2.x before 2.0.0-beta5 mishandles HTTP/2 disconnection, which allows remote attackers to cause a denial of service use-after-free and application crash or possibly execute arbitrary code via a crafted packet...

CVE-2016-4817

lib/http2/connection.c in H2O before 1.7.3 and 2.x before 2.0.0-beta5 mishandles HTTP/2 disconnection, which allows remote attackers to cause a denial of service use-after-free and application crash or possibly execute arbitrary code via a crafted packet...

CVE-2016-3211

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0199 and CVE-2016-0200...

CVE-2016-3202

The Microsoft 1 Chakra JavaScript, 2 JScript, and 3 VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruptio...

CVE-2016-3202

The Microsoft 1 Chakra JavaScript, 2 JScript, and 3 VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruptio...

spice: Multiple vulnerabilities

Background Provides a complete open source solution for remote access to virtual machines in a seamless way so you can play videos, record audio, share usb devices and share folders without complications. Description Multiple vulnerabilities have been discovered in spice, please review the CVE...

Microsoft Windows ATMFD.dll Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.Adobe Type Manager Font Driver is a font management driver from Adobe. An elevation of privilege vulnerability exists in the Adobe Type Manager Font Driver ATMFD.dll for Microsoft Windows, which arises from the program's...

BadTunnel: the impact of Win95 to Win10“Super-vulnerability”with CVE-2 0 1 6-3 2 1 3-the vulnerability warning-the black bar safety net

! Yesterday, Microsoft released a high-risk vulnerability patch the vulnerability by Tencent basaltic laboratory Creator to Yang Chinese circle of safety person of the TK, the leader of the Find, and named it“BadTunnel”, is currently the Windows history of the most wide-reaching vulnerabilities,...

CVE-2016-4971

It was found that wget used a file name provided by the server for the downloaded file when following a HTTP redirect to a FTP server resource. This could cause wget to create a file with a different name than expected, possibly allowing the server to execute arbitrary code on the client...

Heap overflow

Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element...

CVE-2016-2828

Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture's recycle pool...

WordPress LoginWall Plugin Remote File Inclusion

A Remote File Inclusion vulnerability exists in WordPress LoginWall Plugin. Successful exploitation of this vulnerability would allow a non-authenticated attacker to include remote files and execute arbitrary code on the vulnerable system...