Updated catfish package fixes CVE-2014-2096

Updated catfish package fixes security vulnerabilities: Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse bin/catfish.py in the current working directory CVE-2014-2096. Additionally, the update adds a missing requirement for the...

Updated catfish package fixes CVE-2014-2093

Updated catfish package fixes security vulnerability: Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse catfish.py in the current working directory CVE-2014-2093. Additionally, the update fixes the application icon symlink and a crash when som...

Critical Path InJoin Directory Server 4.0 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4718/info Critical Path provides an LDAP Lightweight Directory Access Protocol Directory Server called InJoin. InJoin Directory Server is provided for Microsoft Windows operating systems and Unix variants. iCon is the...

Microsoft Windows 98SE User32.DLL Icon Handling Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13791/info The Microsoft 'user32.dll' library is prone to a denial of service vulnerability. The issue manifests when the library handles icon .ico files containing large size values. Reports indicate that this issue exis...

VLC Player 2.0.8 (.m3u) - Local Crash PoC

No description provided by source. Exploit Title: VLC Player 2.0.8 = Local Crash PoC Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and variou...

AOL Instant Messenger 4.x/5.x Smiley Icon Location Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13553/info AOL Instant Messenger is reported prone to a remote denial of service vulnerability. The issue manifests when the affected client application handles a chat invitation, a file transfer, or a game request that...

Easy Icon Maker .ico File Reading Crash

No description provided by source. ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX 000000...

Easy Icon Maker 5.01 - Crash PoC

No description provided by source. Exploit Title: Easy Icon Maker Version 5.01 Crash Poc vulnerability Date: 28-04-2013 Exploit Author: Asesino04 Vendor Homepage: link Software Link: http://www.icon-maker.com/iconmaker.exe Version: 5.01 & old versions Tested on: Windows 7 Introduction :...

Security changes in Opera 20 update

Security Security changes in Opera 20 update Share March 13th, 2014 We have just released a silent update of Opera 20, you would most likely not even have noticed. From a security perspective, we have made two interesting changes in this update. The first one regards what we call the badge, the...

XSS on several select lists

Steps to reproduce: -Create a new issue type -Add "alert'Issue name' as Issue name mind the qoute at the beginning -Add "alert'Issue desc' as Issue Description -Add /images/icons/issuetypes/genericissue.png "alert'Issue icon' as Issue Icon -Make sure that this issue type is available on your...

Stable Channel Update

The Chrome Team is excited to announce the promotion of Chrome 32 to the Stable channel. 32.0.1700.76 for Windows and Chrome Frame and 32.0.1700.77 for Mac and Linux. This release contains a number of fixes and improvements, including: Tab indicators for sound, webcam and casting A different look...

Setting Up a Secure and Private Twitter Account

To kick off the new year, we are restarting our tutorial screencast series where we attempt to briefly walk users through the process of locking down their various online accounts. Today’s video, which is just slightly longer than we had hoped, thoroughly details the steps necessary to ensure tha...

IcoFX 2.5.0.0 (.ico) - Buffer Overflow Vulnerability

IcoFX is prone to a client side security vulnerability when processing .ICO files. This vulnerability could be exploited by a remote attacker to execute arbitrary code on the target machine, by enticing the user of IcoFX to open a specially crafted icon file. Version 2.5.0.0 for Windows is...

Security changes and features of Opera 18

News Security changes and features of Opera 18 Share December 4th, 2013 Opera 18 is now out on the stable channel, so we wanted to take a moment to go through some of the new features from a security perspective. Media Access One of the new features is media access. That is; camera and microphone...

Fedora 20 : xpdf-3.03-8.fc20 (2013-17398)

Fix icon issue in desktop file. Resolve CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

VideoLAN VLC Media Player 2.0.8 - .m3u Local Crash (PoC)

VideoLAN VLC Media Player 2.0.8 - .m3u Local Crash PoC Exploit Title: VLC Player 2.0.8 ", "inj3ct0rs...

VideoLAN VLC Media Player 2.0.8 - '.m3u' Local Crash (PoC)

Exploit Title: VLC Player 2.0.8 ", "inj3ct0rs.m3u"; print file $PoC; print "\n + File successfully created!\n" or d...

Fedora Update for oxygen-icon-theme FEDORA-2013-13112

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for oxygen-icon-theme FEDORA-2013-13499

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for oxygen-icon-theme FEDORA-2013-13499

Check for the Version of oxygen-icon-theme OpenVAS Vulnerability Test Fedora Update for oxygen-icon-theme FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...