KLA10593 Multiple vulnerabilities in Adobe products

Multiple serious vulnerabilities have been found in Adobe products. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, cause denial of service, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. A...

SUSE SLES10 Security Update : xntp (SUSE-SU-2015:0322-1)

xntp has been updated to fix two security issues : - CVE-2014-9298: ::1 can be spoofed on some OSes, so ACLs based on IPv6 ::1 addresses can be bypassed bnc911792. - CVE-2014-9297: vallen is not validated in several places in ntpcrypto.c, leading to potential info leak bnc911792. Note that Tenabl...

php: multiple issues

CVE-2015-1351 denial of service Use-after-free vulnerability in the zendsharedmemdup function in zendsharedalloc.c in the OPcache extension allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. - CVE-2015-1352 denial of service The...

Python-2.5-PyLocale_strxfrm

Python applications that use the 'PyLocalestrxfrm' function are prone to an information leak. Exploiting this issue allows remote attackers to read portions of memory. Python 2.4.4-2 and 2.5 are confirmed vulnerable...

CVE-2014-7142

The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service crash via a crafted 1 ICMP or 2 ICMP6 packet size...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2283-1)

Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol PPP when used with the Layer Two Tunneling Protocol L2TP. A local user could exploit this flaw to gain administrative privileges. CVE-2014-4943 Michael S. Tsirkin discovered an information leak in the Linux kernel's...

Linux <= 2.6.37-rc1 serial_multiport_struct Local Info Leak Exploit

No description provided by source. / Linux = 2.6.37-rc1 serialmultiportstruct Info Leak Exploit ./splitmilk2 leak 134514859 \m/ Linux = 2.6.37-rc1 serialmultiportstruct Info Leak Exploit \m/ by Todor Donev x Leakfile : leak x Reservedsize : 134514859 + Leaking.. = ... Greets to prdelka, for...

Hiverr 2.2 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Hiverr v2.2 Multiple Vulnerabilities Date: 05.02.2013 Author: xStarCode Exploit Author: xStarCode Version: 2.2 Category: webapps Google Dork: Tested on: Linux Exploit: -----Index Vulnerabilities: == SQL Injections...

MS13-009 Microsoft Internet Explorer COALineDashStyleArray Integer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

openSUSE Security Update : kernel (openSUSE-SU-2013:1971-1)

The Linux Kernel was updated to fix various security issues and bugs. - sctp: Use correct sideffect command in duplicate cookie handling bnc826102, CVE-2013-2206. - Drivers: hv: util: Fix a bug in util version negotiation code bnc838346. - vmxnet3: prevent div-by-zero panic when ring resizing...

kernel: security and bugfix update (important)

The Linux Kernel was updated to fix various security issues and bugs. Main security issues fixed: A security issue in the tty layer that was fixed that could be used by local attackers for code execution CVE-2014-0196. Two security issues in the floppy driver were fixed that could be used by loca...

CVE-2014-0857

CVE-2014-0857 affects IBM WebSphere Application Server (WAS) Administrative Console. Affected versions: WAS 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2. Description: remote authenticated users can obtain sensitive information via a crafted request due to improper handling of requests in the Admin...

Updated kernel-rt packages fix multiple vulnerabilities

This kernel update provides an update to the 3.10 longterm branch, currently 3.10.28 and fixes the following security issues: The ath9khtcsetbssidmask function in drivers/net/wireless/ath/ath9k/htcdrvmain.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC...

kernel: security and bugfix update (important)

The Linux kernel was updated to fix various bugs and security issues: - mm/page-writeback.c: do not count anon pages as dirtyable memory reclaim stalls. - mm/page-writeback.c: fix dirtybalancereserve subtraction from dirtyable memory reclaim stalls. - compatsysrecvmmsg X32 fix bnc860993...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2589)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2589 advisory. - kernel/signal.c: stop info leak via the tkill and the tgkill syscalls Emese Revfy Orabug: 17951083 CVE-2013-2141 - ipoutput: do skb ufo init for...

Oracle Linux 6 : kernel (ELSA-2013-1645)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1645 advisory. - net ipv6: udp packets following an UFO enqueued packet need also be handled by UFO Jiri Pirko 1011930 CVE-2013-4387 - fs compatioctl:...

MS12-022 Microsoft Internet Explorer COALineDashStyleArray Unsafe Memory Access

Exploit for windows platform in category remote exploits This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 EOS def initializeinfo= superupdateinfoinfo, 'Name' = "MS12-022 Microsoft...

SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution Vulnerability

This Metasploit module exploits the SEListCtrlX ActiveX installed with the SIEMENS Solid Edge product. The vulnerability exists on several APIs provided by the control, where user supplied input is handled as a memory pointer without proper validation, allowing an attacker to read and corrupt...

SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 25 security fixes in this release, including: 181617 High CVE-2013-2900: Incomplete path sanitization in file handling. Credit to Krystian Bigaj. 254159 Low CVE-2013-2905: Information leak via overly broad permissions on shared memory files. Credit to Christian...