Fat Free CRM Gem for Ruby allows remote attackers to obtain sensitive informations

Fat Free CRM contains a flaw in user controllers that is triggered as JSON requests are rendered with a full JSON object. This may allow a remote attacker to gain access to potentially sensitive information e.g. other users password hashes...

The story of MS13-002: How incorrectly casting fat pointers can make your code explode

C++ supports developers in object-orientated programming and removes from the developer the responsibility of dealing with many object-oriented programming OOP paradigm problems. But these problems do not magically disappear. Rather it is the compiler that aims to provide a solution to many of th...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.2 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2013:0744 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

kernel security and bug fix update

2.6.32-358.6.1 - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - char tty: hold lock across tty buffer finding and buffer filling Prarit Bhargava 928686 901780 - net tcp: fix for zero packetsinflight was too broad Thomas Graf 927309 920794 - net tcp:...

Mandriva Linux Security Advisory : sleuthkit (MDVSA-2013:125)

Updated sleuthkit packages fix security vulnerabilities : A security flaw was found in the way the Sleuth Kit TSK, a collection of UNIX-based command line tools allowing to investigate a computer, performed management of '.' dotfile file system entry. An attacker could use this flaw to evade...

Ubuntu Update for linux USN-1775-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN17751.nasl 8456 2018-01-18 06:58:40Z teissa $ Ubuntu Update for linux USN-1775-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Fedora Update for rubygem-json FEDORA-2013-3052

Check for the Version of rubygem-json OpenVAS Vulnerability Test Fedora Update for rubygem-json FEDORA-2013-3052 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix several security issues and multiple bugs are now available for Red Hat Enterprise MRG 2.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

[SECURITY] Fedora 18 Update: rubygem-json-1.6.8-1.fc18

This is a implementation of the JSON specification according to RFC 4627 in Ruby. You can think of it as a low fat alternative to XML, if you want to store data to disk or transmit it over a network rather than use a verbose markup language...

PT-2013-3382 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.3 Description: The issue is related to a buffer overflow in the VFAT filesystem implementation. It allows local users to gain privileges or cause a denial of service, resulting in a system crash. This occurs...

UBUNTU-CVE-2013-1773

Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service system crash via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversi...

Fedora 18 : sleuthkit-4.0.1-1.fc18 (2013-0320)

New Features: More DOS partition types are displayed. Added fcat tool that takes in file name and exports content equivalent to using ifind and icat together. performance improvements with FAT code maps and diradd performance improvements with NTFS code maps added AONLY flag to blockwalk Updated...

Fatheads SQL Injection

Exploit Title : fatheads Sql Injection Vulnerabilitiy Author : IrIsT Team Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://www.fatheads.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Designed and developed by Fat...

Freeamp 2.0.7 (FAT File) Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Freeamp 2.0.7 FAT...

Fat Player Media Player 0.6b0 - Local Buffer Overflow (Metasploit)

$Id: fatplayerwav.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Fat Player Media Player 0.6b0 Buffer Overflow

$Id: fatplayerwav.rb 10764 2010-10-20 11:53:12Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fat Player 0.6b WAV File Processing Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ========================================================= Fat Player 0.6b WAV File Processing Buffer Overflow SEH ========================================================= Stack-based buffer overflow in Fat Player 0.6b allows remote attacker...

Fat Player 0.6b - .WAV File Processing Buffer Overflow (SEH)

Fat Player 0.6b - .WAV File Processing Buffer Overflow SEH Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference:...

Fat Player 0.6b - '.WAV' File Processing Buffer Overflow (SEH)

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4962...