[SECURITY] Fedora 24 Update: torbrowser-launcher-0.2.4-1.fc24

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your lan guage and for your...

[SECURITY] Fedora 22 Update: torbrowser-launcher-0.2.4-1.fc22

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your lan guage and for your...

The vulnerabilities of Debian GNU/Linux and Ubuntu operating systems, along with the PostgreSQL database management system, allow attackers to enhance their privileges.

The vulnerability in the configuration of Debian GNU/Linux and Ubuntu operating systems, as well as PostgreSQL database management systems, is related to errors in restricting access to the GUCS component for PL/Java. Exploiting this vulnerability allows a malicious actor to increase their...

Adversary Resistant Computing Platform: SubgraphOS

Subgraph OS is an adversary resistant computing platform. The main purpose of Subgraph OS is to empower people to communicate, share, and collaborate without fear of surveillance and interference. What this means in practical terms is that users of Subgraph OS can safely perform their day-to-day...

IcedTea: Multiple vulnerabilities

Background IcedTea’s aim is to provide OpenJDK in a form suitable for easy configuration, compilation and distribution with the primary goal of allowing inclusion in GNU/Linux distributions. Description Various OpenJDK attack vectors in IcedTea, such as 2D, Corba, Hotspot, Libraries, and JAXP,...

PT-2016-1728

Name of the Vulnerable Software and Affected Versions xymond versions 4.1.x through 4.3.x before 4.3.25 Description The issue is related to a lack of protection for service data in the xymond component of the Debian GNU/Linux operating system. It allows a remote attacker to read arbitrary files i...

ffmpeg and Libav cross-domain information disclosure vulnerability

Overview ffmpeg is a "cross-platform solution to record, convert and stream audio and video". ffmpeg is vulnerable to local file disclosure due to improper enforcement of domain restrictions when processing playlist files. Description CWE-201: Information Exposure Through Sent Data- CVE-2016-1897...

OpenSSH Client contains a client information leak vulnerability and buffer overflow

Overview OpenSSH client code versions 5.4 through 7.1p1 contains a client information leak vulnerability that could allow an OpenSSH client to leak information not limited to but including private keys, as well as a buffer overflow in certain non-default configurations. Description CWE-200:...

Dream Gallery 1.0 SQL Injection

Sql Injection on Dream Gallery v1.0 + Date: 10/01/2016 + Risk: High + CWE Number : CWE-89 + Author: Felipe Andrian Peixoto + Vendor Homepage: http://clareslab.com.br/ + Software Demo : http://clareslab.com.br/dream/ + Contact: [email protected] + Tested on: Windows 7 and Gnu/Linux + Dork:...

The vulnerabilities of Debian GNU/Linux operating systems, Ubuntu, office software packages such as LibreOffice and Apache OpenOffice, allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of Debian GNU/Linux operating systems, Ubuntu, office software packages like LibreOffice and Apache OpenOffice is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code using specially...

The vulnerabilities of Debian GNU/Linux operating systems, Ubuntu, office software packages such as LibreOffice and Apache OpenOffice, allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the Debian GNU/Linux operating system, Ubuntu, and the office software packages LibreOffice and Apache OpenOffice is due to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code by accessing an nonexisten...

Beurk - Experimental Unix Rootkit

BEURK is an userland preload rootkit for GNU/Linux, heavily focused around anti-debugging and anti-detection. NOTE: BEURK is a recursive acronym for B EURK E xperimental U nix R oot K it Features Hide attacker files and directories Realtime log cleanup on utmp/wtmp Anti process and login detectio...

FBZX 2.10 Local Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com Program: fbzx - ZX Spectrum Emulator for X Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: FBZX v2.10 and prior is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks ...

TACK 1.07 - Local Stack-Based Buffer Overflow Exploit

Exploit for linux platform in category local exploits Exploit Author: Juan Sacco - http://www.exploitpack.com Program: tack - Terminal action checker Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: TACK v1.07 and prior is prone to a stack-based buffer overflow vulnerability because the...

TUDU 0.82 - Local Stack-Based Buffer Overflow Exploit

Exploit for linux platform in category local exploits Exploit Author: Juan Sacco - http://www.exploitpack.com Program: tudu - Command line hierarchical ToDo list Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: TUDU v0.82 and prior is prone to a stack-based buffer overflow vulnerability...

TACK 1.07 - Local Stack Buffer Overflow

TACK 1.07 - Local Stack Buffer Overflow Exploit Author: Juan Sacco - http://www.exploitpack.com Program: tack - Terminal action checker Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: TACK v1.07 and prior is prone to a stack-based buffer overflow vulnerability because the application fails...

TACK 1.07 - Local Stack Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com Program: tack - Terminal action checker Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: TACK v1.07 and prior is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on...

FBZX 2.10 - Local Stack Buffer Overflow

FBZX 2.10 - Local Stack Buffer Overflow Exploit Author: Juan Sacco - http://www.exploitpack.com Program: fbzx - ZX Spectrum Emulator for X Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: FBZX v2.10 and prior is prone to a stack-based buffer overflow vulnerability because the application...

FBZX 2.10 - Local Stack Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com Program: fbzx - ZX Spectrum Emulator for X Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: FBZX v2.10 and prior is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks ...

CVE-2009-5082

The 1 configure and 2 config.guess scripts in GNU troff aka groff 1.20.1 on Openwall GNU//Linux aka Owl improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file...