CVE-2014-9376

Integer underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service out-of-bounds write and possibly execute arbitrary code via a small 1 size variable value in the dissectordhcp function in dissectors/ecdhcp.c, 2 length value to the dissectorgg function in dissectors/ecgg.c,...

CVE-2014-9376

Integer underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service out-of-bounds write and possibly execute arbitrary code via a small 1 size variable value in the dissectordhcp function in dissectors/ecdhcp.c, 2 length value to the dissectorgg function in dissectors/ecgg.c,...

DEBIAN-CVE-2014-8101

The RandR extension in XFree86 4.2.0, X.Org X Window System aka X11 or X X11R6.7, and X.Org Server aka xserver and xorg-server before 1.16.3 allows remote authenticated users to cause a denial of service out-of-bounds read or write or possibly execute arbitrary code via a crafted length or index...

PT-2014-1850 · Xfree86 +6 · Xfree86 +7

Name of the Vulnerable Software and Affected Versions: XFree86 version 4.0.1 X.Org X Window System aka X11 or X version X11R6.7 X.Org Server aka xserver and xorg-server versions prior to 1.16.3 xorg-x11-server-Xdmx version 1.15.0 xorg-x11-server-debuginfo version 1.15.0 xorg-x11-server-Xnest...

PT-2014-1851 · X.Org +6 · Xorg-X11-Server +18

Name of the Vulnerable Software and Affected Versions: X.Org Server versions prior to 1.16.3 XFree86 version 4.2.0 X.Org X Window System version X11R6.7 xorg-x11-server-Xdmx version 1.15.0 xorg-x11-server-debuginfo version 1.15.0 xorg-x11-server-Xnest version 1.15.0 xorg-x11-server-Xephyr version...

SuSE 11.3 Security Update : compat-openssl097g (SAT Patch Number 10033)

The SLES 9 compatibility package compat-openssl097g received a roll up update fixing various security issues : - Build option no-ssl3 is incomplete. CVE-2014-3568 - Add support for TLSFALLBACKSCSV. CVE-2014-3566 - Information leak in pretty printing functions. CVE-2014-3508 - OCSP bad key DoS...

PHP 5.x / Bash Shellshock Proof of Concept

This is a proof of concept that demonstrates how the Bash shellshock vulnerability can be used in PHP to bypass disablefunctions, safemode, etc...

Debian Security Advisory DSA 3073-1 (libgcrypt11 - security update)

Daniel Genkin, Itamar Pipman and Eran Tromer discovered that Elgamal encryption subkeys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side-channel attack. OpenVAS Vulnerability Test $Id: deb3073.nasl 6759 2017-07-19 09:56:33Z teissa $ Auto-generated...

Fedora 21 : qemu-2.1.2-6.fc21 (2014-13993)

CVE-2014-7815 vnc: insufficient bitsperpixel from the client sanitization bz 1157647, bz 1157641 - CVE-2014-3689 vmwarevga: insufficient parameter validation in rectangle functions bz 1153038, bz 1153035 Fix dep on numactl-devel to be build time not install time Note that Tenable Network Security...

ZTE ZXDSL 831CII Direct Object Reference

The modem usually serves html files & protects them with HTTP Basic authentication. however, the cgi files, does not get this protection. so simply requesting any cgi file without no authentication would give a remote attacker full access to the modem and then can easily be used to root the modem...

[SECURITY] [DSA 3066-1] qemu security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3066-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 06, 2014 http://www.debian.org/security/faq -...

RHEL 6 : rhev-hypervisor6 (RHSA-2012:0531)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0531 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization...

Debian DSA-3067-1 : qemu-kvm - security update

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware. - CVE-2014-3689 The Advanced Threat Research team at Intel Security reported that guest provided parameter were insufficiently validated in rectangle functions in the vmware-vga driver. A privileg...

ThinkSNS第一弹 － SQL注入

简要描述： ThinkSNS漏洞系列第一弹，某处处理不当导致SQL注入 详细说明： 漏洞点出现在Comment Widget里： \addons\widget\CommentWidget\CommentWidget.class.php:138 / 添加评论的操作 @return array 评论添加状态和提示信息 / public function addcomment // 返回结果集默认值 $return = array 'status' = 0, 'data' = L 'PUBLICCONCENTISERROR' ; // 获取接收数据 $data = $POST; // 安全过滤...

Arbitrary Command Execution

Overview Affected versions of this package are vulnerable to Arbitrary Command Execution due to the assignment functions accessing constructors functions, allowing attackers to execute their malicious code. Remediation Upgrade angularjs to version 1.3.2 or higher. References - GitHub ChangeLog -...

PHP 5.6.2 - Shellshock Safe Mode Disable Functions Bypass Command Injection

PHP 5.6.2 - Shellshock Safe Mode Disable Functions Bypass Command Injection Exploit Title: PHP 5.x Shellshock Exploit bypass disablefunctions Google Dork: none Date: 10/31/2014 Exploit Author: Ryan King Starfall Vendor Homepage: http://php.net Software Link:...

PHP 5.6.2 - Shellshock Safe Mode disable_functions Bypass Command Injection

PHP 5.6.2 - Shellshock Safe Mode disablefunctions Bypass Command Injection Exploit Title: PHP 5.x Shellshock Exploit bypass disablefunctions Google Dork: none Date: 10/31/2014 Exploit Author: Ryan King Starfall Vendor Homepage: http://php.net Software Link:...

Ubuntu 14.04 LTS : php5 vulnerabilities (USN-2391-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2391-1 advisory. Symeon Paraschoudis discovered that PHP incorrectly handled the mkgmtime function. A remote attacker could possibly use this issue to cause PHP to crash,...

Ubuntu: Security Advisory (USN-2391-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2391-1: php5 vulnerabilities

Symeon Paraschoudis discovered that PHP incorrectly handled the mkgmtime function. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. CVE-2014-3668 Symeon Paraschoudis discovered that PHP incorrectly handled unserializing objects. A remote...