[SECURITY] Fedora 24 Update: kf5-kidletime-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 integration module for idle time detection...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the idle package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information...

CVE-2015-8659

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

DEBIAN-CVE-2015-8659

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

Design/Logic Flaw

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

UBUNTU-CVE-2015-8659

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

nghttp2: use-after-free

nghttp2 1.6.0 fixes a heap-based use-after-free bug in idle stream handling code, where an idle/closed stream could possibly be destroyed while it was still referenced...

RHEL 6 : rhev-hypervisor (RHSA-2015:1713)

Updated rhev-hypervisor packages that fix multiple security issues, several bugs, and add various enhancements are now available. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEV-M: webadmin automatic logout fails if VM is selected

It was found that the idle timeout in the Red Hat Enterprise Virtualization Manager Web Admin interface failed to log out a session if a VM has been selected in the VM grid view. This could allow a local attacker to access the web interface if it was left unattended...

Python IDLE 2.7.8 - Crash PoC Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Title : Python IDLE 2.7.8 - Crash Proof Of Concept Website : http://www.python.org/idle/ Tested : Windows 7 / Windows 8.1 Author : Hadi Zomorodi Monavar Email : email protected 1 . run python code : python poc.py 2 . open...

Python IDLE 2.7.8 - Crash (PoC)

Python IDLE 2.7.8 - Crash PoC !/usr/bin/env python Title : Python IDLE 2.7.8 - Crash Proof Of Concept Website : http://www.python.org/idle/ Tested : Windows 7 / Windows 8.1 Author : Hadi Zomorodi Monavar Email : [email protected] 1 . run python code : python poc.py 2 . open r3z4.txt and copy...

Python IDLE 2.7.8 - Crash (PoC)

!/usr/bin/env python Title : Python IDLE 2.7.8 - Crash Proof Of Concept Website : http://www.python.org/idle/ Tested : Windows 7 / Windows 8.1 Author : Hadi Zomorodi Monavar Email : [email protected] 1 . run python code : python poc.py 2 . open r3z4.txt and copy content to clipboard 3 . open...

CVE-2014-9037

WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash...

DEBIAN-CVE-2014-9037

WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash...

CVE-2014-9037

WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash...

openSUSE Security Update : telepathy-idle (openSUSE-SU-2013:0915-1)

Changes in telepathy-idle : - Add telepathy-idle-require-tls-validation.patch bnc817120, CVE-2007-6746. This fixes flaws in the SSL certificate validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Input validation

The protocol-inspection feature on Cisco Adaptive Security Appliances ASA devices does not properly implement the idle timeout, which allows remote attackers to cause a denial of service connection-table exhaustion via crafted requests that use an inspected protocol, aka Bug ID CSCuh13899...

PT-2013-4414 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue is related to the protocol-inspection feature on Cisco Adaptive Security Appliances ASA devices, which does not properly implement the idle...

SuSE 11.2 / 11.3 Security Update : telepathy-idle (SAT Patch Numbers 8215 / 8216)

Telepathy-idle did not check SSL certificates. CVE-2007-6746 was assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

CVE-2013-3568 - Linksys CSRF + Root Command Injection

Hi list, I would like to inform you that the latest available Linksys WRT110 firmware is prone to root shell command injection via cross-site request forgery. This vulnerability is the result of the web interface's failure to sanitize ping targets as well as a lack of csrf tokens. Linksys/Belkin...