UBUNTU-CVE-2016-7910

Use-after-free vulnerability in the diskseqfstop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed...

SSL/TLS: Cert Issuer Policy Check Failed

This script reports if the SSL/TLS certificate is not signed by the given issuer. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Error "The tools ISO must be ejected from all running VMs in the pool" While installing XenServer hotfix.

When attempting to install XenServer hotfix the following error message is displayed: Note that there are no ISO's attached to any of the VM's running in the pool. Also executed the 'xe vm-cd-eject --multiple' command to ensure this is the case: xe vm-cd-eject --multiple operation failed on...

Goigi CMS Backend /admin/index.php Universal Password Bypass Vulnerability

Goigi CMS has a universal password bypass vulnerability in the backend /admin/index.php login, which can be utilized with '=' 'or' to bypass login authentication. When the login succeeds, the page returns 302 and location=location: dashboard in the http header. If the login fails, the returned...

CVE-2016-1278

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

Code injection

The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists and is locked when the detailederroronconnect option is not supported or is configured as "False," which allows remote attackers to enumerat...

SMB Login Failed For Authenticated Checks

It was NOT possible to login using the provided SMB credentials. Hence authenticated checks are NOT enabled. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Wireshark - alloc_address_wmem Assertion Failure

Wireshark - allocaddresswmem Assertion Failure Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=804 The following crash due to an asserion failure can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr...

Code injection

The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service libvirtd crash by triggering a failed unlink after creating a volume on a rootsquash NFS pool...

kernel: pipe buffer state corruption after unsuccessful atomic read from pipe

It was found that the fix for CVE-2015-1805 incorrectly kept buffer offset and buffer length in sync on a failed atomic read, potentially resulting in a pipe buffer state corruption. A local, unprivileged user could use this flaw to crash the system or leak kernel memory to user space...

Out-of-bounds read in HTML parser following a failed allocation — Mozilla

Security researcher Ronald Crane reported an out-of-bounds read following a failed allocation in the HTML parser while working with unicode strings. This can also affect the parsing of XML and SVG format data. This leads to a potentially exploitable crash...

DLA-445-2 squid3 - regression update

Bulletin has no description...

Spring Social Java Library Social Authentication Vulnerability

A nasty cross-site request forgery vulnerability was patched Thursday in the Spring Social core library, one of the most pervasive Java application libraries. Spring Social facilitates social authentication between applications and online services, and the vulnerability allowed attackers to bypas...

Linux Kernel 3.17 - 'Python ctypes and memfd_create' noexec File Security Bypass

Exploit Title: Linux = 3.17 noexec bypass with python ctypes and memfdcreate Date: 2015.10.14 Exploit Author: soyer Version: linux = 3.17 Tested on: Ubuntu 15.04 x8664 usage: $ ls -la execfile -rwxr-xr-x 1 soyer soyer 8600 Oct 14 15:04 execfile $ ./execfile bash: ./execfile: Permission denied $...

Linux Kernel 3.17 - Python ctypes and memfd_create noexec File Security Bypass

Linux Kernel 3.17 - Python ctypes and memfdcreate noexec File Security Bypass Exploit Title: Linux = 3.17 noexec bypass with python ctypes and memfdcreate Date: 2015.10.14 Exploit Author: soyer Version: linux = 3.17 Tested on: Ubuntu 15.04 x8664 usage: $ ls -la execfile -rwxr-xr-x 1 soyer soyer...

The vulnerability of the iOS operating system allows a hacker to reset the counter of failed password attempts.

The vulnerability of the AppleKeyStore component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability could allow a local attacker to reset the password input failure counter using the backup function...

Apple iOS iOS Backup Password Reset Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows physically accessible local users to be able to reset passwords for failed iOS backup attempts...

pgbouncer -- failed auth_query lookup leads to connection as auth_user

PgBouncer reports: New authuser functionality introduced in 1.6 allows login as authuser when client presents unknown username. It's quite likely authuser is superuser. Affects only setups that have enabled authuser in their config...

WordPress Plugin WP Mobile Edition - Local File Inclusion

Exploit Title: Wordpress Plugin 'WP Mobile Edition' LFI Vulnerability Date: june 6, 2015 Exploit Author: ViRuS OS Google Dork: inurl:?fdxswitcher=mobile Vendor Homepage: https://wordpress.org/plugins/wp-mobile-edition/ Software Link:...

Discuz Forum auto-blasting tools principles of analysis-vulnerability warning-the black bar safety net

Recently broke about the use of social work library blasting Discuz Forum user name and password of the tool, causing a lot of Forum user information leakage, the analysis works as follows. Here Discuz determines whether the access IP of main with the following logic: private function getclientip...