CVE-2014-4669: Exposure of Sensitive Information to an Unauthorized Actor

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied

Use-after-free vulnerability in the nfqnlzcopy function in net/netfilter/nfnetlinkqueuecore.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the...

UBUNTU-CVE-2014-0203

The dofollowlink function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service incorrect free operations and system crash via an open system call...

DiscuzX 任意文件操作漏洞

简要描述： DiscuzX 任意文件操作漏洞 详细说明： 漏洞实际上是任意文件删除，但是由于删除的函数容易被定位，所以不方便写在简要描述或标题内。 昨天下载DiscuzX 3.2的代码，在 source/include/spacecp/spacecpprofile.php 中找到以下代码： if$GET'deletefile' && isarray$GET'deletefile' foreach$GET'deletefile' as $key = $value ifisset$G'cache''profilesetting'$key echo...

Hacker Exploits NAS Vulns to Mine $620K in Dogecoin

A hacker, well-versed in malware and exploit development, took advantage of vulnerabilities in Synology network attached storage boxes popular with home users to mine more than $600,000 worth of the digital currency Dogecoin. Researchers Pat Litke and David Shear of Dell SecureWorks’ Counter Thre...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)

java-160-openjdk was updated to 1.12.5 bnc817157 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework...

Design/Logic Flaw

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors...

Simple SQLi Dumper v5.1 - Tool to find bugs, errors or vulnerabilities in MySQL database

SSDp is an usefull penetration tool to find bugs, errors or vulnerabilities in MySQL database. Functions SQL Injection Operation System Function Dump Database Extract Database Schema Search Columns Name Read File read only Create File read only Brute Table & Column Download Simple SQLi Dumper v5....

check_mk symbolic links vulnerability

Symbolic links are not checked during files operation...

Easy currency network operation and maintenance improper leads can be randomly logged in user-bug warning-the black bar safety net

Easy currency network operation and maintenance improper can lead to a random user login http://www. easecoin. com/ vulnerability address You can get the user SESSION login ! ! Feel free to test landing 2 Repair solutions: You can repair, I will not waste the effort of typing to what vulnerabilit...

Grand network operation and maintenance improper lead to sensitive information disclosure-vulnerability warning-the black bar safety net

Test it OPENSSL that python /Users/apple/Desktop/ssltest.py www.snda.com ! ! Just want to test the next vulnerability...

Cherished network of two operation and maintenance improper lead the attacker into the internal network get database-vulnerability warning-the black bar safety net

Cherished network of two operation and maintenance improper lead the attacker into the internal network get database Cherished network two operations, the first of May into the internal network, the other available at the three libraries of the password, but I even didn't even, the only prove...

大汉版通所属部分系统文件任意文件上传漏洞

简要描述： 任意类型文件上传，可getshell。影响到jact、jsearch、JCMS相关版本，不好一一统计。 详细说明： 受影响的系统版本是WebService中存在一个receivefile操作的，一般在wsInfo服务中。 （注：不同产品不同版本代码可能会有所不同） 0x1 jsearch public String receivefileString strLoginId, String strPwd, String strKey, DataHandler handler, String filename, int iState String result = "";...

Code injection

The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause a denial of service system crash or obtain sensitive information from kernel memory via a crafted PTLDINFO operation...

(0Day) Borland StarTeam Web Server AttachmentService performCheckoutFile Remote Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland StarTeam. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AttachmentService servlet in the FILECHECKOUT operation. The performCheckoutFile...

CVE-2014-1531

Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...

CVE-2014-1531

Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...

Connect "_method"跨站脚本漏洞

Connect是一款基于WEB的应用。 Connect不正确过滤"method" POST参数数据，允许远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Connect 2.x Connect 2.8.1版本已修复该漏洞，建议用户下载使用： https://github.com/senchalabs/connect...

MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free", 'Description' = %q This module exploits an use after free condition on...

MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free

This Metasploit module exploits an use after free condition on Internet Explorer as used in the wild on the "Operation SnowMan" in February 2014. The module uses Flash Player 12 in order to bypass ASLR and finally DEP. This module requires Metasploit: http//metasploit.com/download Current source:...