PT-2020-5626 · Luajit +3 · Luajit +3

Name of the Vulnerable Software and Affected Versions: LuaJit versions 2.1.0-beta3 and earlier Description: The issue is related to an out-of-bounds read in LuaJit, caused by mishandled gc handler frame traversal. This can be exploited by a remote attacker to cause a denial of service. The proble...

Internet Bug Bounty: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize

https://bugs.php.net/bug.php?id=72434 This vulnerability was discovered during the auditing of a vendor on Hackerone. Similar to our other submission on bugs.php.net and here, this vulnerability is remotely exploitable. Please feel free to ask for more technical details if necessary. Thank you fo...

Internet Bug Bounty: Use After Free Vulnerability in PHP's GC algorithm and unserialize

https://bugs.php.net/bug.php?id=72433 This vulnerability was discovered during the auditing of a vendor on Hackerone and could be successfully remotely exploited. The required conditions are a normal PHP setup with a PHP version = 5.3 and 7. Further, it is enough if the remote side uses code like...

gc-forever.com XSS vulnerability

Open Bug Bounty ID: OBB-147656 Description| Value ---|--- Affected Website:| gc-forever.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GC Plugin for Dropbox - Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application GC Plugin for Dropbox published at the 'play' market has multiple vulnerabilities...

GC - BSD license, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application GC published at the 'play' market has multiple vulnerabilities...

PT-2015-7650 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.2.7 Description: The issue allows local users to cause a denial of service via crafted keyctl commands. It is related to the key gc unused keys function in security/keys/gc.c. Recommendations: For Linux kernel...

Oracle: Security Advisory (ELSA-2013-1500)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-245)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Workbox Plugin loads full HTML of JIRA comment, leads to GC loop of death on large comment

To reproduce: start Confluence with GC logging enabled optional, but helps Link Confluence and JIRA create an issue in JIRA watch it add a large comment to the JIRA issue, e.g. paste a 7.7MB log file between \code\ tags open the workbox in Confluence optional: in network tab of web developer tool...

Workbox Plugin loads full HTML of JIRA comment, leads to GC loop of death on large comment

To reproduce: start Confluence with GC logging enabled optional, but helps Link Confluence and JIRA create an issue in JIRA watch it add a large comment to the JIRA issue, e.g. paste a 7.7MB log file between \code\ tags open the workbox in Confluence optional: in network tab of web developer tool...

Workbox Plugin loads full HTML of JIRA comment, leads to GC loop of death on large comment

To reproduce: start Confluence with GC logging enabled optional, but helps Link Confluence and JIRA create an issue in JIRA watch it add a large comment to the JIRA issue, e.g. paste a 7.7MB log file between \code\ tags open the workbox in Confluence optional: in network tab of web developer tool...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.

The vulnerability of the gc-devel-7.1 package for the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.

The vulnerability of the gc-7.1 package of the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the integrity of protected information.

The vulnerability of the gc-7.1 package of the CentOS operating system; its exploitation may lead to the compromise of protected information. The vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.

The vulnerability of the gc-debuginfo-7.1 package of the Red Hat Enterprise Linux operating system can lead to the compromise of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the integrity of protected information.

The vulnerability of the gc-devel-7.1 package in the CentOS operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2015:0190-1) (POODLE)

OpenJDK was updated to 2.5.4 - OpenJDK 7u75 to fix security issues and bugs : - Security fixes - S8046656: Update protocol support - S8047125, CVE-2015-0395: ref More phantom object references - S8047130: Fewer escapes from escape analysis - S8048035, CVE-2015-0400: Ensure proper proxy protocols ...

Security update for java-1_7_0-openjdk (important)

OpenJDK was updated to 2.5.4 - OpenJDK 7u75 to fix security issues and bugs: Security fixes - S8046656: Update protocol support - S8047125, CVE-2015-0395: ref More phantom object references - S8047130: Fewer escapes from escape analysis - S8048035, CVE-2015-0400: Ensure proper proxy protocols -...

Linux Kernel 'keys/gc.c' Local Memory Corruption Vulnerability

The Linux Kernel is the kernel of the Linux operating system. A local memory corruption vulnerability exists in Linux Kernel 'keys/gc.c', which could be exploited by a local attacker to cause the kernel to crash and deny service to legitimate users...