PT-2015-1731

Name of the Vulnerable Software and Affected Versions Adobe Integrated Runtime versions affected versions not specified Adobe Flash Player versions affected versions not specified Description The issue is related to the use of memory after it has been freed, which can be exploited by a remote...

ipa and slapi-nis security and bug fix update

ipa 4.1.0-18.0.1.el71.3 - Replace login-screen-logo.png 20362818 - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png 4.1.0-18.3 - ipa-python ipalib.errors.LDAPError: failed to decode certificate:...

Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An...

Debian Security Advisory DSA 2960-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb2960.nasl 6724 2017-07-14...

PT-2013-5025

Name of the Vulnerable Software and Affected Versions Cocaine gem versions 0.4.0 through 0.5.2 Description The issue allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation. Recommendations For Cocaine gem versions 0.4...

ShopEx最新版多处SQL注射

简要描述： 不知道我有不有搞错，但已经尽量下载了最新版了。。。 在很多地方测试都存在。。。 ShopEx最新版多处SQL注射 详细说明： 我很怀疑自己是不是搞错呢。。。 注射1： http://127.0.0.1:5656/shopex/api.php POST act=searchsubregions&apiversion=1.0&returndata=string&pregionid=22 and select 1 fromselect count,concat0x7c,select Select version from informationschema.tables limit...

Framework: Information (internal server information, classpath, local working directories, session IDs) disclosure

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language EL, evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a 1 name attribute in a a spring:hasBindErrors ta...

Framework: Information (internal server information, classpath, local working directories, session IDs) disclosure

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language EL, evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a 1 name attribute in a a spring:hasBindErrors ta...

Framework: Information (internal server information, classpath, local working directories, session IDs) disclosure

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language EL, evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a 1 name attribute in a a spring:hasBindErrors ta...

CVE-2012-6065: Undefined Security Weakness

The OM Maximenu module 6.x-1.43 and earlier for Drupal, when the "Title has PHP" option is enabled, allows remote authenticated users with the "Administer OM Maximenu" permission to execute arbitrary PHP code via a "Link Title," a different vulnerability than CVE-2012-5553...

PT-2012-6253

Name of the Vulnerable Software and Affected Versions OM Maximenu module versions 6.x-1.43 and earlier Description The issue allows remote authenticated users with the "Administer OM Maximenu" permission to execute arbitrary PHP code via a "Link Title" when the "Title has PHP" option is enabled...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

Race condition

Race condition in DefenseWall Personal Firewall 3.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

BELL-CVE-2012-1573 CVE-2012-1573 does not affect BellSoft software

Bulletin has no description...

0p3nH4x #1 2011 has began - Ezine Out !

0p3nH4x 1 2011 has began - Ezine Out ! https://thehackernews.com/images/-FAT9PDlybHg/Tci5cugzEnI/AAAAAAAAB2M/sC9vu8qEBL8/s...

Linux Kernel get_random_int函数不充分随机数漏洞

Linux kernel 2.6.x CVE ID: CVE-2009-3238 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/char/random.c文件中的getrandomint函数所生成的随机数随机性不够，攻击者可以相对容易的预测返回值，绕过基于随机化的保护机制。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

HP-UX Update for Apache HPSBUX01064

Check for the Version of Apache OpenVAS Vulnerability Test HP-UX Update for Apache HPSBUX01064 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

HP-UX Update for Trusted Mode remshd HPSBUX02072

Check for the Version of Trusted Mode remshd OpenVAS Vulnerability Test HP-UX Update for Trusted Mode remshd HPSBUX02072 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

HP-UX Update for X Font Server (xfs) Software HPSBUX02303

Check for the Version of X Font Server xfs Software OpenVAS Vulnerability Test HP-UX Update for X Font Server xfs Software HPSBUX02303 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Parsing Asp. net Trojan file operations-vulnerability warning-the black bar safety net

Start Asp. net Trojan EvilSpy of preparation, name is boss ice blood to play, quite good. This article main introduce Asp. net Trojan file operation function of the specific implementation. You want to write Asp. net Trojan, the first to import the name space System. IO. The name space System. IO...