pcre2: Heap-buffer-overflow in read_repeat_counts

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6615370005741568 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000180 Crash State:...

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HP-TOUCHSMART-CALENDAR-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard...

Hewlett Packard TouchSmart Calendar Service 4.1.4245 Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HP-TOUCHSMART-CALENDAR-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard...

libchewing: Heap-buffer-overflow in ueStrNBytes

Project: https://github.com/chewing/libchewing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5606046517166080 Fuzzer: libFuzzerchewingdynamicconfigfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Google Chrome < 54.0.2840.59 Multiple Vulnerabilities

Binary data 9687.pasl...

iWisoft Video Converter 1.2 DLL Hijacking

i?Document Title: =============== iWisoft Video Converter 1.2 - DLL Hijacking Vulnerability Release Date: ============= 2016-10-04 Vulnerability Disclosure Timeline: ================================== 2016-10-04 : Discovery of the Vulnerability 2016-10-04 : Contact the Vendor No Response 2016-10-...

Heap-buffer-overflow in archive_read_format_cpio_read_header

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4798906516897792 Fuzzer: libFuzzerlibarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61900014e080 Crash State: archivereadformatcpioreadheader...

Symantec Web Gateway Management Console Interface Command Injection

SUMMARY Symantec has released an update to address a Symantec Web Gateway SWG Management Console Interface command injection issue bypassing validation restrictions to add an unauthorized whitelist entry. AFFECTED PRODUCTS Symantec Web Gateway SWG --- CVE | Affected Versions | Remediation...

Clean Master v1.0 - Unquoted Path Privilege Escalation

Document Title: =============== Clean Master v1.0 - Unquoted Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1968 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 19...

AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit

Document Title: =============== AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1966 Release Date: ============= 2016-10-03 Vulnerability Laboratory ID VL-ID: ===================================...

Snort 2.9.7.0-WIN32 DLL Hijacking

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SNORT-DLL-HIJACK.txt + ISR: ApparitionSec Vendor: ============= www.snort.org Product: =================== Snort v2.9.7.0-WIN32 Snort is an open-source, free and lightweight...

Zortam MP3 Studio v21.15 - Insecure File Permissions

Document Title: =============== Zortam MP3 Studio v21.15 - Insecure File Permissions References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1963 Release Date: ============= 2016-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 1963...

iPod Video Converter v1.34 - DLL Hijacking Exploit

Document Title: =============== iPod Video Converter v1.34 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1961 Release Date: ============= 2016-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 1961...

Zortam MP3 Studio v21.15 - Insecure File Permissions

Document Title: =============== Zortam MP3 Studio v21.15 - Insecure File Permissions References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1963 Release Date: ============= 2016-09-28 Vulnerability Laboratory ID VL-ID: ==================================== 1963...

Sparkasse (Bank) - Service Security Advisory WB021 2016

Document Title: =============== Sparkasse Bank - Service Security Advisory WB021 2016 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1959 Download PDF: http://www.vulnerability-lab.com/resources/documents/spk-sec-WB021.pdf Vulnerability Magazine:...

Sparkasse (Bank) - Service Security Advisory WB021 2016

Document Title: =============== Sparkasse Bank - Service Security Advisory WB021 2016 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1959 Download PDF: https://www.vulnerability-lab.com/resources/documents/spk-sec-WB021.pdf Vulnerability Magazine:...

RealEstate CMS 3.00.50 Cross Site Scripting

i?Document Title: =============== RealEstate CMS 3.00.50 - Cross Site Web Vulnerability Release Date: ============= 2016-09-08 Vulnerability Disclosure Timeline: ================================== 2016-09-23 : Public Disclosure Product & Service Introduction: ===============================...

PHPHolidays CMS 3.00.50 Cross Site Scripting

Document Title: =============== PHPHolidays CMS v3.00.50 - Cross Site Scripting Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1948 Release Date: ============= 2016-09-08 Vulnerability Laboratory ID VL-ID:...

USN-3048-1 curl vulnerability | Cloud Foundry

USN-3048-1 curl vulnerability Medium Vendor Canonical Ubuntu, curl Versions Affected Canonical Ubuntu 14.04 LTS Description Bru Rom discovered that curl incorrectly handled client certificates when resuming a TLS session. CVE-2016-5419 It was discovered that curl incorrectly handled client...

phpCollab CMS 2.5 Cross Site Request Forgery

Document Title: =============== phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1911 Release Date: ============= 2016-08-17 Vulnerability Laboratory ID VL-ID: ====================================...