Xen xenmem_add_to_physmap_one() printk rate limit denial of service vulnerability

Xen is an open source virtual machine. There is a problem with the printk rate limit in Xen xenmemaddtophysmapone, which allows Guest domains with partial administrative control and the ability to map other Guest domains to send large numbers of messages to the Xen console...

WordPress WP Limit Login Attempts Plugin <= 2.0.0 - Multiple SQL Injection

These vulnerabilities allow an attacker to execute arbitrary SQL commands via the 1. X-Forwarded-For or 2. Client-IP HTTP header. Solution Update the plugin...

Yiqicms 存储型XSS

yiqicms 最新版的1.9 留言区，跟1.8版本一样存在相同的问题。在评论区中对标题仅仅限制了30个字符长度的限制，没有进行任何。 if!pregmatch"/^.1,30$/",$msgtitle ShowMsg"请输入正确的标题"; exit; if!pregmatch"/^.1,10$/",$msgname ShowMsg"请输入您的姓名"; exit; if!pregmatch"/^.1,20$/",$msgcontact ShowMsg"请输入正确的联系方式"; exit; if!pregmatch"/^.1,200$/",$msgcontent...

Vimeo: Stored XSS on player.vimeo.com

Description The page loaded for the Vimeo embedded player prints the Name of the owner of the video in Javascript context. Some characters are escaped, like " but others like , and - if the video is public - any Vimeo user can be affected by the Javascript code that is loaded. However, there is a...

SOL17173 - OpenJDK vulnerability CVE-2015-4760

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

SOL17171 - OpenJDK vulnerability CVE-2015-2628

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

ownCloud: owncloud.com: Account Compromise Through CSRF

@architaa, @vishnudfx, @konkakarthik and @hussain reported a CSRF vulnerability on the owncloud.com web page that may lead to an account take over. This issue has been mitigated meanwhile. To protect private information such as the reporters' email address this issue has been disclosed limitedly...

Microsoft Windows HTA (HTML Application) - Remote Code Execution Exploit

Microsoft Windows HTA HTML Application remote code execution exploit that leverages MS14-064. !/usr/bin/php poc'."\n\n"; $reza = socketcreateAFINET, SOCKSTREAM, 0 or die'Failed to create socket!'; socketbind$reza, 0,$port; socketlisten$...

Gratipay: Authentication errors in server side validaton of E-MAIL

To be honest, I'm not sure if there is any real security implications of this bug, but it's something which should be fixed at some point since it'll be pretty easy. I'm going to describe the issue with reproducible steps: 1. Navigate to Gratipay Settings Page...

kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements.

It was found that the Linux kernel's TCP/IP protocol suite implementation for IPv6 allowed the Hop Limit value to be set to a smaller value than the default one. An attacker on a local network could use this flaw to prevent systems on that network from sending or receiving network packets...

kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements.

It was found that the Linux kernel's TCP/IP protocol suite implementation for IPv6 allowed the Hop Limit value to be set to a smaller value than the default one. An attacker on a local network could use this flaw to prevent systems on that network from sending or receiving network packets...

kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements.

It was found that the Linux kernel's TCP/IP protocol suite implementation for IPv6 allowed the Hop Limit value to be set to a smaller value than the default one. An attacker on a local network could use this flaw to prevent systems on that network from sending or receiving network packets...

OracleVM 3.3 : ntp (OVMSA-2015-0102)

The remote OracleVM system is missing necessary patches to address critical security updates : - reject packets without MAC when authentication is enabled CVE-2015-1798 - protect symmetric associations with symmetric key against DoS attack CVE-2015-1799 - fix generation of MD5 keys with ntp-keyge...

kernel security, bug fix, and enhancement update

2.6.32-573 - security selinux: dont waste ebitmap space when importing NetLabel categories Paul Moore 1130197 - x86 Revert Add driver auto probing for x86 features v4 Prarit Bhargava 1231280 - net bridge: netfilter: dont call iptables on vlan packets if sysctl is off Florian Westphal 1236551 - ne...

The OpenSSH service vulnerability exists allowing unlimited password guesses-vulnerability warning-the black bar safety net

! You can only have 6 times to try a password? If you were given 1 million chance? OpenSSH the presence of a vulnerability, this vulnerability can allow an attacker to bypass Single Sign-On password input attempts, the error limit number of times. By default, the encryption service only allows th...

SOL16983 - PCRE library vulnerability CVE-2015-2325

Although the BIG-IP/BIG-IQ/Enterprise Manager software contains the vulnerable code, BIG-IP/BIG-IQ/Enterprise Manager does not use the vulnerable code in a way that exposes the vulnerability. An attacker must have local access to BIG-IP/BIG-IQ/Enterprise Manager to trigger an exploit, which the...

FreeBSD : apache22 -- chunk header parsing defect (29083f8e-2ca8-11e5-86ff-14dae9d210b8)

Apache Foundation reports : CVE-2015-3183 core: Fix chunk header parsing defect. Remove aprbrigadeflatten, buffering and duplicated code from the HTTPIN filter, parse chunks in a single pass with zero copy. Limit accepted chunk-size to 2^63-1 and be strict about chunk-ext authorized characters...

Unbreakable Enterprise kernel security update

2.6.39-400.250.7 - ipv6: Don't reduce hop limit for an interface D.S. Ljungmark Orabug: 21444791 CVE-2015-2922 - ipv4: Missing sknullsnodeinit in pingunhash. David S. Miller Orabug: 21444688 CVE-2015-3636...

Adobe Reader/Acrobat JavaScript API Execution Limit Bypass Vulnerability (CNVD-2015-04646)

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An execution limit bypass vulnerability exists in the Adobe Reader/Acrobat JavaScript API that allows attackers to bypass JavaScript API execution limits via unknown vectors...

Adobe Reader/Acrobat JavaScript API Execution Limit Bypass Vulnerability (CNVD-2015-04648)

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An execution limit bypass vulnerability exists in the Adobe Reader/Acrobat JavaScript API that allows attackers to bypass JavaScript API execution limits via unknown vectors...