Updated tor packages fix security vulnerabilities

"disgleirio" discovered that a malicious client could trigger an assertion failure in a Tor instance providing a hidden service, thus rendering the service inaccessible CVE-2015-2928. "DonnchaC" discovered that Tor clients would crash with an assertion failure upon parsing specially crafted hidde...

Debian DSA-3216-1 : tor - security update

Several vulnerabilities have been discovered in Tor, a connection-based low-latency anonymous communication system : - CVE-2015-2928 'disgleirio' discovered that a malicious client could trigger an assertion failure in a Tor instance providing a hidden service, thus rendering the service...

Debian DLA-187-1 : tor security update

Several hidden service related denial of service issues have been discovered in Tor, a connection-based low-latency anonymous communication system. o 'disgleirio' discovered that a malicious client could trigger an assertion failure in a Tor instance providing a hidden service, thus rendering the...

DLA-187-1 tor - security update

Bulletin has no description...

For the recent Bosch global eye OAuth vulnerability analysis and preventive recommendations-vulnerability warning-the black bar safety net

According to CnetreportsSingapore Nanyang Technological University, a man named Wang Jing PhD student, found that the OAuth and OpenID open source login tools the“covert redirect”vulnerabilityCovert Redirect to. First of all need to clear point is that the vulnerability is not present in the OAut...

CVE-2013-3227

The caifseqpktrecvmsg function in net/caif/caifsocket.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

Unbreakable Enterprise kernel security and bug fix update

2.6.39-400.17.1 - This is a fix on dlmcleanmasterlist Xiaowei.Hu - RDS: fix rds-ping spinlock recursion jeff.liu Orabug: 16223050 - vhost: fix length for cross region descriptor Michael S. Tsirkin Orabug: 16387183 CVE-2013-0311 - kabifix: block/scsi: Allow request and error handling timeouts to b...

FileStream Turbo Browser v11.6 - Buffer Overflow

Document Title: =============== FileStream Turbo Browser v11.6 - Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=491 Release Date: ============= 2012-04-10 Vulnerability Laboratory ID VL-ID: ==================================== 491 Common...

Discuz! 6.0 存储型XSS

简要描述： Discuz! 6.0 存储型XSS 详细说明： Discuz! 6.0 【店铺介绍】存在XSS漏洞 不知道如何访问店铺（没找到这功能！？），所以不知道这个XSS是只跨自己还是跨任何访问店铺的人。 因为这个地方的xss（alert（/Liscker/;）跟去年发的那个【个性签名】 的xss一样，所以个人极度认为这个也是只能跨自己的，只能结合其它漏洞一起来用了。 漏洞证明：...

OpenJournalSystem Stored Xss Vulnerability

Exploit for php platform in category web applications ========================================== OpenJournalSystem Stored Xss Vulnerability ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

CVE-2010-0058

CVE-2010-0058 affects freshclam in ClamAV on Apple Mac OS X 10.5.8 with Security Update 2009-005, due to an incorrect launchd.plist ProgramArguments key that prevents freshclam from running. This could allow remote attackers to introduce viruses if virus definition updates fail to apply. Mitigati...

vBulletin v3.5.2 XSS Vulnerabilities

Exploit for unknown platform in category web applications ==================================== vBulletin v3.5.2 XSS Vulnerabilities ==================================== Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 3.5.2...

kernel security and bug fix update

2.6.9-78.0.17.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

kernel security update

2.6.18-128.1.1.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

All Users startup folder left open if unattended install and OEMP reinstall=1

About a month ago I posted the following to the win2ksecadvice list. However, I received no response. I thought I'd try again since I consider this problem to be pretty serious since it will allow any user to introduce a code stream on another user. I recently noticed a problem with Windows 2000...