65 matches found
CVE-2015-3240
The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service assertion failure and daemon restart via a zero DH g^x value in a KE payload in a IKE packet...
Code injection
Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors...
PT-2014-4295
Name of the Vulnerable Software and Affected Versions OpenSSH versions through 6.4 Description The issue is related to the hash buffer function in schnorr.c, which does not initialize certain data structures when the J-PAKE protocol is enabled. This could allow remote attackers to cause a denial ...
Pop star KE$HA twitter Hacked
Pop star KE$HA twitter Hacked Pop star KE$HA has fallen victim to internet pranksters after her Twitter.com blog was hacked on Sunday. Tweet by her account : Single out in a couple hours. Ugh so fkin stressful… wish I could stay on da the beach forever." It was potentially seen by Kesha's 3.1...
FreeBSD <= 6.1 kqueue() NULL pointer Dereference Local Root Exploit
No description provided by source. FreeBSD = 6.1 suffers from classical check/use race condition on SMP systems in kevent syscall, leading to kernel mode NULL pointer dereference. It can be triggered by spawning two threads: 1st thread looping on open and close syscalls, and the 2nd thread loopin...