dpkg stack buffer overflow vulnerability

dpkg is a package management system developed specifically for "Debian" to facilitate the installation, update and removal of software. A stack buffer overflow vulnerability exists in the dpkg-deb component of dpkg, which allows an attacker to construct a Debian binary package in an old format th...

USN-2820-1 dpkg vulnerability

Hanno Boeck discovered that the dpkg-deb tool incorrectly handled certain old style Debian binary packages. If a user or an automated system were tricked into unpacking a specially crafted binary package, a remote attacker could possibly use this issue to execute arbitrary code...

UBUNTU-CVE-2015-0860

Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which trigger...

Security Advisory - Two Vulnerabilities in Huawei TE Series Product

Huawei TE series is a multimedia video conferencing endpoint that transfers audio, video, and desktop resources based on IP networks. It offers point-to-point and multiparty conferences for attendees at different places to enjoy face-to-face audio/video communication experience. A security...

[SECURITY] Fedora 23 Update: libpng10-1.0.64-1.fc23

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

15-year-old Boy Arrested in connection with TalkTalk Cyber Attack

The arrest is the first major outcome since TalkTalk – the biggest phone and broadband provider in the UK with more than 4 Million customers – had suffered a serious data breach. The Police Service of Northern Ireland PSNI and the investigating officers from the Metropolitan police's cyber crime...

Multiple Buffer Overflow Vulnerabilities in Android

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. Multiple buffer overflow vulnerabilities exist in Android versions prior to 5.1.1, LMY48I. Allowing a remote attacker to execute arbitrary code via an invalid NA unit size...

Pornhub: Unauthenticated access to Content Management System - www1.pornhubpremium.com

The researcher was able to get access to a CMS without authentication. This was an old server that should have been decommissioned. The issue was resolved and the researcher was awarded a bounty. Thank you Mak for the submission!...

old-rozental.ru XSS vulnerability

Vulnerable URL: http://old-rozental.ru/orfografia.php?sid=5"' Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3595230 Google Pagerank| 0 VIP website status...

Debian DLA-249-1 : qemu-kvm security update (Venom)

A vulnerability was discovered in the qemu virtualisation solution : CVE-2015-3456 Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in the potential execution of arbitrary code. Despite the end-of-life of qemu-kvm support in the old-oldstable distribution...

Debian DLA-248-1 : qemu security update (Venom)

A vulnerability was discovered in the qemu virtualisation solution : CVE-2015-3456 Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in the potential execution of arbitrary code. Despite the end-of-life of qemu support in the old-oldstable distribution...

Rockwell Automation RSView32 Information Disclosure Vulnerability

RSView32 is an HMI system for monitoring and controlling automated machines and processes. A security vulnerability in the encryption method used by RSView32 to create password storage files can lead to unauthorized decryption by software users using an old algorithm, which will disclose the user...

PT-2015-3383 · Proftpd +2 · Proftpd +2

Name of the Vulnerable Software and Affected Versions: ProFTPD versions prior to 1.3.6b ProFTPD version 1.3.7rc before 1.3.7rc2 Description: The issue is related to the incorrect handling of overly long commands in the main.c component of the ProFTPD FTP server. This can lead to a remote...

WordPress Revive Old Post Plugin <= 6.9.0 - Privilege Escalation

Because of this vulnerability, the attackers can have an administrator account on the target's website. Solution Upgrade the plugin...

Grindr for iOS Multiple Parameter Handling Email Address Operation Vulnerability

Grindr for iOS is GPS based mobile app. An input validation vulnerability exists in Grindr for iOS that fails to properly filter the email and oldemail parameters, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to...

KLA10524 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or have other unknown impact. Below is a complete list of vulnerabilities 1. Improper IPC interaction handling can be exploited...

PT-2015-1688 · Openssl +1 · Openssl +3

Name of the Vulnerable Software and Affected Versions: OpenSSL versions 1.0.2 through 1.0.2a excluding 1.0.2a Description: The issue allows remote attackers to cause a denial of service daemon crash via a ClientKeyExchange message with a length of zero, when client authentication and an ephemeral...

[SECURITY] Fedora 20 Update: libpng10-1.0.63-1.fc20

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

PT-2015-5274 · Vsftpd +2 · Vsftpd +2

Name of the Vulnerable Software and Affected Versions: vsftpd versions 3.0.2 and earlier Description: The issue allows remote attackers to bypass access restrictions via unknown vectors, related to deny file parsing. Recommendations: For vsftpd versions 3.0.2 and earlier, consider updating to a...

Facebook Open Redirect

Facebook Old Generated URLs Still Vulnerable to Open Redirect Attacks & A New Open Redirect Security Vulnerability Domain: http://www.facebook.com Discover: Wang Jing, School of Physical and Mathematical Sciences SPMS, Nanyang Technological University NTU, Singapore...