Debian: Security Advisory (DSA-3288-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

hostapd: integer underflow in AP mode WMM Action frame processing

An integer underflow flaw, leading to a buffer over-read, was found in the way wpasupplicant handled WMM Action frames. A specially crafted frame could possibly allow an attacker within Wi-Fi radio range to cause wpasupplicant to crash...

DreamBox DM500s Cross Site Scripting

DreamBox DM500s Reflected XSS Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de Summary: The Dreambox DM500s is a Linux-powered DVB satellite, terrestrial and cable digital television receivers set-top box. Tested on: Linux Kernel 2.6.9, The Gemini Project, Enigma...

Android Factory Reset Improper Sanitization Exposes Data

The churn of Android devices, whether older smartphones being traded in or sold online, makes device sanitization imperative. The native feature in the OS, however, may not be doing as thorough a job as advertised. A paper, “Security Analysis of Android Factory Resets” pdf, published by Ross...

VideoCharge Express 3.16.3.04 - Local Buffer Overflow

VideoCharge Express 3.16.3.04 - Local Buffer Overflow !/usr/bin/python Exploit Title: VideoCharge Vanilla BOF Exploit v3.16.3.04 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: v3.16.3.04 Tested on: Win XP3 Software...

VideoCharge Express 3.16.3.04 - BOF Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: VideoCharge Vanilla BOF Exploit v3.16.3.04 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com=20 Version: v3.16.3.04 Tested on: Win XP3 Software...

VideoCharge Professional + Express Vanilla 3.18.4.04 - BOF Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: VideoCharge Vanilla BOF Exploit v3.18.4.04 Date: 10/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com=20 Version: v3.18.4.04 Tested on: Win XP3 Software...

The vulnerability of Google Chrome browser allows a malicious intruder to gain access to the values of audio samples.

A vulnerability in the Google browser’s implementation of the MediaElementAudioSourceNode::process function in the modules/webaudio/MediaElementAudioSourceNode.cpp module Web Audio API in Blink Chrome can be exploited by an attacker to bypass domain restrictions and access values of audio samples...

Debian Security Advisory DSA 3239-1 (icecast2 - security update)

Juliane Holzt discovered that Icecast2, a streaming media server, could dereference a NULL pointer when URL authentication is configured and the streamauth URL is trigged by a client without setting any credentials. This could allow remote attackers to cause a denial of service crash. OpenVAS...

[USN-2534-1] Libav vulnerabilities

========================================================================== Ubuntu Security Notice USN-2534-1 March 17, 2015 libav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

USN-2534-1: Libav vulnerabilities

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...

DSA-3189-1 libav - security update

Bulletin has no description...

Debian Security Advisory DSA 3189-1 (libav - security update)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8.17 OpenVAS Vulnerability Test $Id: deb3189.nasl 6609 2017-07-07 12:05:59...

Debian: Security Advisory (DSA-3189-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Clipbucket 2.7 RC3 0.9 - Blind SQL Injection

Clipbucket 2.7 RC3 0.9 - Blind SQL Injection Exploit Title : Clipbucket 2.7 RC3 0.9 Blind SQL Injection Date : 20 February 2015 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://clip-bucket.com/ Software Link :...

Moodle Shibboleth Validation Plugin Force Quit Vulnerability

Moodle is an open source web-based teaching and learning application. A security vulnerability exists in Moodle multimedia that allows attackers to exploit this vulnerability to force a user to log out via the Shibboleth authentication plugin...

Moodle multimedia filter denial of service vulnerability

Moodle is an open source web-based teaching and learning application. A security vulnerability exists in Moodle multimedia that could be exploited by an attacker to submit a special request for a denial-of-service attack...

[SECURITY] [DSA 3150-1] vlc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3150-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3156-1] liblivemedia security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3156-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 07, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3150-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3150-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 02, 2015 http://www.debian.org/security/faq -...