Vixie Cron crontab 3.0 Privilege Lowering Failure Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop...

EZPhotoShare 1.0/1.1 Memory Corruption Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9150/info eZphotoshare has been reported prone to multiple remote memory corruption vulnerabilities. The issues present themselves in the routines employed by eZphotoshare to handle network based communications. It has be...

SCO Open Server <= 5.0.4 POP Server Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/156/info A buffer overflow exists in the pop server shipped with Santa Cruz Operation, Inc's SCO Open Server. By presenting a buffer of sufficient length to the pop server, an attacker can overwrite the return address on...

Roger Wilco 1.4.1 - Remote Server Side Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8566/info A vulnerability has been reported for various Roger Wilco server releases. The problem occurs server-side, and can be triggered when processing malformed client packets. Specifically, when connecting to a server...

Newspost 2.0/2.1 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12418/info Newspost is prone to a remote buffer overflow vulnerability due to an unbounded memory copy operation. The problem occurs in the 'socketgetline' function of 'socket.c' when the vulnerable client handles NNTP...

GNU CFEngine 2.0.x/2.1 AuthenticationDialogue Remote Heap Based Buffer Overrun Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/10899/info GNU cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability. The vulnerability presents itself in the cfengine cfservd AuthenticationDialogue function. The issue exists due to a...

Internet Explorer "Aurora" Memory Corruption

No description provided by source. $Id: ms10002aurora.rb 9787 2010-07-12 02:51:50Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Juergen Schoenwaelder scotty 2.1.x ntping Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2911/info ntping is a component of scotty, a Tcl interpreter used to retrieve status and configuration information for TCP/IP networks. The utility, which runs with root privileges, contains a locally exploitable buffer...

CVE-2014-4669

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied

Use-after-free vulnerability in the nfqnlzcopy function in net/netfilter/nfnetlinkqueuecore.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the...

UBUNTU-CVE-2014-0203

The dofollowlink function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service incorrect free operations and system crash via an open system call...

DiscuzX 任意文件操作漏洞

简要描述： DiscuzX 任意文件操作漏洞 详细说明： 漏洞实际上是任意文件删除，但是由于删除的函数容易被定位，所以不方便写在简要描述或标题内。 昨天下载DiscuzX 3.2的代码，在 source/include/spacecp/spacecpprofile.php 中找到以下代码： if$GET'deletefile' && isarray$GET'deletefile' foreach$GET'deletefile' as $key = $value ifisset$G'cache''profilesetting'$key echo...

Hacker Exploits NAS Vulns to Mine $620K in Dogecoin

A hacker, well-versed in malware and exploit development, took advantage of vulnerabilities in Synology network attached storage boxes popular with home users to mine more than $600,000 worth of the digital currency Dogecoin. Researchers Pat Litke and David Shear of Dell SecureWorks’ Counter Thre...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)

java-160-openjdk was updated to 1.12.5 bnc817157 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework...

Design/Logic Flaw

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors...

Simple SQLi Dumper v5.1 - Tool to find bugs, errors or vulnerabilities in MySQL database

SSDp is an usefull penetration tool to find bugs, errors or vulnerabilities in MySQL database. Functions SQL Injection Operation System Function Dump Database Extract Database Schema Search Columns Name Read File read only Create File read only Brute Table & Column Download Simple SQLi Dumper v5....

check_mk symbolic links vulnerability

Symbolic links are not checked during files operation...

Easy currency network operation and maintenance improper leads can be randomly logged in user-bug warning-the black bar safety net

Easy currency network operation and maintenance improper can lead to a random user login http://www. easecoin. com/ vulnerability address You can get the user SESSION login ! ! Feel free to test landing 2 Repair solutions: You can repair, I will not waste the effort of typing to what vulnerabilit...

Grand network operation and maintenance improper lead to sensitive information disclosure-vulnerability warning-the black bar safety net

Test it OPENSSL that python /Users/apple/Desktop/ssltest.py www.snda.com ! ! Just want to test the next vulnerability...

Cherished network of two operation and maintenance improper lead the attacker into the internal network get database-vulnerability warning-the black bar safety net

Cherished network of two operation and maintenance improper lead the attacker into the internal network get database Cherished network two operations, the first of May into the internal network, the other available at the three libraries of the password, but I even didn't even, the only prove...