Apple iOS v7.1.2 - (Merge Apps) Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow DoS

Exploit for windows platform in category dos / poc...

LiveWorld Multiple Products - Cross Site Scripting

LiveWorld Multiple Products - Cross Site Scripting LiveWorld Cross Site Scripting Vendor: LiveWorld, Inc Product: LiveWorld Version: Multiple Products Website: http://www.liveworld.com CVE: CVE-2004-2566 OSVDB: 9180 PACKETSTORM: 34143 Description: LiveWorld provides collaborative services for...

Tenable Appliance Check (deprecated)

This plugin was previously used to detect if the local scanner was using the Tenable Appliance. It is no longer needed, and is now obsolete. %NASLMINLEVEL 999999 @DEPRECATED@ C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77329; scriptversion "1.2"; scriptcvsdate"Dat...

JVN#07957080: Dominion KX2-101 vulnerable to denial-of-service (DoS)

Dominion KX2-101 provided by Raritan Japan, Inc. is a KVM-over-IP switch. Dominion KX2-101 contains a denial-of-service DoS vulnerability. Impact By receiving a specially crafted packet, the product may be forced to stop responding. Solution Upgrade to Dominion KX2-101 V2 The vulnerability has be...

ansible -- multiple vulnerabilities

Ansible, Inc. reports: Arbitrary execution from data from compromised remote hosts or local data when using a legacy Ansible syntax - resolved in Ansible 1.7 ansible-galaxy command when used on local tarballs and not galaxy.ansible.com can install a malformed tarball if so provided - resolved in...

Vulnerability in OpenSSL - Race condition in ssl_parse_serverhello_tlsext

A race condition was found in sslparseserverhellotlsext. If a multithreaded client connects to a malicious server using a resumed session and the server sends an ec point format extension, it could write up to 255 bytes to freed memory. Found by Gabor Tyukasz LogMeIn Inc...

Ebay Magento PS CP #4 - Bypass & Persistent Vulnerability

Document Title: =============== Ebay Magento PS CP 4 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID: EIBBP-28091 Video: http://www.vulnerability-lab.com/getcontent.php?id=1276 View:...

Ebay Magento PS CP #4 - Bypass & Persistent Vulnerability

Document Title: =============== Ebay Magento PS CP 4 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID: EIBBP-28091 Video: http://www.vulnerability-lab.com/getcontent.php?id=1276 View:...

Ebay Inc Magento PS - Bypass & Persistent Vulnerability

Document Title: =============== Ebay Inc Magento PS - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1276 Video: https://www.youtube.com/watch?v=v8knMYRUOQ Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID:...

Ebay Inc Magento PS - Bypass & Persistent Vulnerability

Document Title: =============== Ebay Inc Magento PS - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1276 Video: https://www.youtube.com/watch?v=v8knMYRUOQ Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID:...

Ebay Inc Magento ProStore CP Filter Bypass

Document Title: =============== Ebay Inc Magento ProStore CP 4 - Filter Validation Bypass & Persistent Payment Information Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID: EIBBP-28091 Video:...

Better WP Security 3.5.5 - inc/admin/content.php id_specialfile Parameter Stored XSS

The iThemes Security formerly Better WP Security WordPress plugin was affected by an inc/admin/content.php idspecialfile Parameter Stored XSS security vulnerability...

Linux/x86 - Reverse TCP (127.1.1.1:1337/TCP) Shell Shellcode (74 bytes)

Linux/x86 - Reverse TCP 127.1.1.1:1337/TCP Shell Shellcode 74 bytes. Shellcode exploit for Linuxx86 platform / Title: Shell Reverse TCP Shellcode - 74 bytes Platform: Linux/x86 Date: 2014-07-25 Author: Julien Ahrens @MrTuxracer Website: http://www.rcesecurity.com Disassembly of section .text:...

ansible -- code execution from compromised remote host data or untrusted local data

Ansible, Inc. reports: Arbitrary execution from data from compromised remote hosts or untrusted local data - resolved in Ansible 1.6.7...

[SECURITY] Fedora 20 Update: cups-1.7.4-1.fc20

CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

JVN#75990997: Cybozu Garoon vulnerable to access restriction bypass

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in the function "Portlets", which may result in an access restriction bypass vulnerability CWE-264. Impact Portlets may be altered by another Cybozu Garoon user. Solution Update the Software Update to the lates...

SuSE 11.3 Security Update : kdebase4-workspace (SAT Patch Number 9467)

This kdebase4-workspace update fixes two security issues : - NULL pointer dereference in KDM and KCheckPass. CVE-2013-4132 - Memory leak that could lead to a denial of service. CVE-2013-4133 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

Baidu Spark Browser v26.5.9999.3511 - Remote Stack Overflow Vulnerability (DoS)

Exploit for windows platform in category dos / poc !-- Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow Vulnerability DoS Vendor: Baidu, Inc. Product web page: http://www.baidu.com Affected version: 26.5.9999.3511 Summary: Spark Browser is a free Internet browser with very sharp UIs and...

百度浏览器海外版（Spark Browser） v26.5.9999.3511 - Remote Stack Overflow Vulnerability (DoS)

Vendor: Baidu, Inc. Product web page: http://www.baidu.com Affected version: 26.5.9999.3511 Summary: Spark Browser is a free Internet browser with very sharp UIs and cool utilities. It's based on the Chromium technology platform, giving it fast browsing capabilities. Desc: Spark Browser version...