ntp: incomplete checks in ntp_crypto.c

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...

MediaWiki wikilink cross-site scripting vulnerability

MediaWiki is a suite of free and freely available web-based wiki engines that can be used to deploy in-house knowledge management and content management systems. MediaWiki fails to adequately filter wikilinks, allowing remote attackers to exploit vulnerabilities to inject malicious scripts or HTM...

WSO2 Identity Server Cross-Site Scripting Vulnerability

WSO2 Identity Server is an open source identity service that supports Information Cards, OpenID and XACML identity frameworks. WSO2 Identity Server suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...

OpenSSL Heartbleed 漏洞 (心脏出血)

OpenSSL“心脏出血”漏洞是一个非常严重的问题。这个漏洞使攻击者能够从内存中读取多达64 KB的数据。一些安全研究员表示：无需任何特权信息或身份验证，我们就可以从我们自己的（测试机上）偷来X.509证书的私钥、用户名与密码、聊天工具的消息、电子邮件以及重要的商业文档和通信等数据。这一切是如何发生的呢？让我们一起从代码中一探究竟吧。0x01 Bug请看ssl/dlboth.c，漏洞的补丁从这行语句开始：int dtls1processheartbeatSSL s unsigned char p = &s-s3-rrec.data0, pl; unsigned short hbtype;...

CUPS Sample Engine Cross-Site Scripting Vulnerability

CUPS is a Universal Unix Printing System, a cross-platform printing solution for Unix environments, based on the Internet Printing Protocol, providing most PostScript and raster printer services. A cross-site scripting vulnerability exists in the CUPS sample engine, which allows remote attackers ...

IBM Curam Social Program Management Cross-Site Scripting Vulnerability

IBM Curam Social Program Management is a social program management solution. The solution supports the end-to-end social program delivery process. A cross-site scripting vulnerability exists in IBM Curam SPM, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Microsoft Outlook App for Mac Cross-Site Scripting Vulnerability

Microsoft Office for Mac 2011 is an office suite for the Mac system. An unspecified cross-site scripting vulnerability in Microsoft Office for Mac 2011 allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information o...

Asterisk libcURL HTTP Request Injection (AST-2015-002)

According to its SIP banner, the version of Asterisk running on the remote host is potentially affected by an HTTP request injection vulnerability due to a flaw within the included libcURL library in the 'parseurlandfillconn' function when handling line feeds and carriage returns. A remote...

OpenOffice 1.0.1 - Remote Access Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8794/info OpenOffice provides functionality so that it can be configured to listen on a designated network port for incoming communications. OpenOffice is prone to a remote denial of service vulnerability under certain...

Python 1.5.2 Pickle Unsafe eval() Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5255/info Python is an open source, object oriented programming language. The Python Pickle module is provided to convert object variables into a serialized form pickling, and later recover the data back into an object...

eMule 0.2x Client OP_SERVERIDENT Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8440/info eMule client has been reported prone to a heap overflow vulnerability. The issue presents itself when the client parses malicious data received from the server. This issue may allow an attacker to provide...

Systrace Multiple System Call Wrappers Concurrency Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread and the kernel. Attackers can explo...

Joomla! Kunena组件"[map]" BBCode脚本注入漏洞

Joomla!是一套在国外相当知名的内容管理系统。 由于在创建信息时通过"map" BBCode参数传递的输入在bbcode/bbcode.php中没有被正确过滤，攻击者可以利用漏洞在恶意数据被查看时，在受影响站点上下文的用户浏览器会话中注入并执行任意HTML和脚本代码。 0 Kunena 3.x component for Joomla! Joomla! Kunena 3.0.5版本以修复此漏洞，建议用户下载使用： http://www.kunena.org/blog/135-kunena-3-0-5-released...

Lianja SQL 1.0.0RC5.1 db_netserver Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Lianja SQL 1.0.0RC5.1 dbnetserver Sta...

Novell eDirectory NCP Stack Buffer Overflow (CVE-2012-0432)

A stack buffer overflow exists in Novell eDirectory NetWare Core Protocol NCP stack. The vulnerability is due to lack of bounds checking in the KeyedObjectLogin function. A remote attacker could exploit this vulnerability by sending TCP packets with malicious data...

SA-CONTRIB-2012-143 PRH Search - Cross Site Scripting (XSS)

PRH Search provides an interface to search for association information for Finnish association using the PRH Patentti- ja Rekisterihallitus database. The module fails to sanitize data retrieved from an untrusted third party source, thereby exposing an arbitrary script injection vulnerability XSS...

XSRF vulnerability in the Mail Page plugin

We have identified and fixed a cross-site request forgery XSRF vulnerability which may affect Confluence instances in a public environment. The XSRF vulnerability is exposed in the Confluence Mail Page plugin. Note that the Mail Page plugin is disabled by default. If you do not have this plugin...

Easy RM To MP3 2.7.3.7000 Buffer Overflow

Exploit Title: Easy RM to MP3 2.7.3.700 Local Buffer Overflow .m3u , .pls , .smi , .wpl , .wax , .wvx , .ram Date: 4 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.exploit-db.com/application/10642/ Version: 2.7.3.700 Tested on: Windows XP SP 1 CVE : N / A !/usr/bin/python This exploit...

dotDefender - Cross-Site Scripting Security Bypass

dotDefender - Cross-Site Scripting Security Bypass source: https://www.securityfocus.com/bid/41560/info dotDefender is prone to a security-bypass vulnerability because it fails to restrict malicious data from reaching protected sites. Remote attackers can exploit this issue to bypass security...

FreeBSD : horde-base -- multiple vulnerabilities (ee23aa09-a175-11de-96c0-0011098ad87f)

The Horde team reports : An error within the form library when handling image form fields can be exploited to overwrite arbitrary local files. An error exists within the MIME Viewer library when rendering unknown text parts. This can be exploited to execute arbitrary HTML and script code in a...