17579 matches found
GNU Wget Buffer Overflow Vulnerability
GNU Wget is a set of free software developed by the GNU Project for downloading over the Internet, which supports downloading over the three most common TCP/IP protocols: HTTP, HTTPS, and FTP. A buffer overflow vulnerability exists in GNU Wget. An attacker could exploit the vulnerability to cause...
The vulnerability in the elfcomm.c file of the GNU Binutils, related to memory access after its release, allows a hacker to cause a service failure.
The vulnerability in the elfcomm.c file of the GNU Binutils relates to memory access after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the processmetadata function in the GNU Libextractor library, related to reading beyond the memory boundaries, allows attackers to cause service failures or disclose protected information.
The vulnerability of the processmetadata function in the GNU Libextractor library is related to the issue of reading beyond the memory boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose protected information...
The vulnerability of the processmetadata function in the GNU Libextractor library is related to the pointer manipulation during the processing of OLE files. This allows an attacker to trigger a service failure or disclose protected information using a specially created OLE file.
The vulnerability of the processmetadata function in the GNU Libextractor library is related to the assignment of a null pointer during the processing of OLE files. Exploiting this vulnerability could allow an attacker to cause service failures or reveal memory contents using a specially crafted...
The vulnerability of the `load_specificdebug_section` function in the GNU Binutils, related to integer overflow, allows a attacker to cause a service failure.
The vulnerability of the loadspecificdebugsection function in objdump.c within the GNU Binutils package is related to integer overflow, which can lead to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the elf_link_add_object_symbols function in the GNU Binutils, related to the pointer manipulation involving NULL, allows a malicious actor to trigger a denial-of-service attack.
The vulnerability of the elflinkaddobjectsymbols function elflink.c in the BFD library, which is part of the GNU Binutils, relates to the dereferencing of the NULL pointer for ETDYN files without a program header. Exploitation of this vulnerability could allow an attacker to cause a service failu...
GNU Wget vulnerable to buffer overflow
Overview GNU Wget contains a buffer overflow vulnerability CWE-119. Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An attacker may be able to cause a denial-of-service DoS or may execute an...
openSUSE: Security Advisory for irssi (openSUSE-SU-2019:0048-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
JVN#25261088: GNU Wget vulnerable to buffer overflow
GNU Wget contains a buffer overflow vulnerability CWE-119. Impact An attacker may be able to cause a denial-of-service DoS or may execute an arbitrary code. Solution Apply the update Update GNU Wget according to the information provided by the developer. Products Affected GNU Wget 1.20.1 and earl...
Moodle CMS 3.6.x < 3.6.2, 3.5.x < 3.5.4, 3.4.x < 3.4.7 and < 3.1.15 Multiple Vulnerabilities
Moodle CMS is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio...
EulerOS 2.0 SP5 : tar (EulerOS-SA-2019-1154)
According to the version of the tar package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infini...
EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-1132)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in processmipsspecific in readelf.c via a malformed MIPS opti...
BSA-2018-606
Security Advisory ID : BSA-2018-606 Component : bzip2recover Revision : 2.0 The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator follow...
phpMussel - PHP-based Anti-Virus Anti-Trojan Anti-Malware Solution
phpMussel is an ideal solution for shared hosting environments, where it's often not possible to utilize or install conventional anti-virus protection solutions, phpMussel is a PHP script designed to detect trojans, viruses,malware and other threats within files uploaded to your system wherever t...
WordPress Anti-Malware Security And Brute-Force Firewall 4.18.63 Local File Inclusion
Exploit Title: Wordpress Anti-Malware Security and Bruteforce Firewall - Local File Inclusion Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: N/A Software Link: https://wordpress.org/plugins/gotmls/ Version: Version 4.18.63 Tested on: Debian GNU/Linux 9...
WordPress Loco Translate 2.2.1 Local File Inclusion
Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate/ Version: Version 2.2.1 Tested on: Debian GNU/Linux 9 Docker...
WordPress Plugin Loco Translate 2.2.1 - Local File Inclusion
WordPress Plugin Loco Translate 2.2.1 - Local File Inclusion Exploit Title: Wordpress Loco Translate Version 2.2.1 Plugin LFI Google Dork: N/A Date: 03 / 26 / 2019 Exploit Author: Ali S. Ahmad S4R1N Vendor Homepage: https://localise.biz/ Software Link: https://wordpress.org/plugins/loco-translate...
Debian DLA-1726-1 : bash security update
Two issues have been fixed in bash, the GNU Bourne-Again Shell : CVE-2016-9401 The popd builtin segfaulted when called with negative out of range offsets. CVE-2019-9924 Sylvain Beucler discovered that it was possible to call commands that contained a slash when in restricted mode rbash by adding...
SPIP CMS 2.x / 3.x Add Administrator / File Upload
Exploit Title : Spip CMS 2.x/3.x Add Administrator Account & Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Published Date : 26/03/2019 First Discovered Date : 2013 - 2014 Vendor Homepage : spip.net Software Download Links :...
