4399 matches found
IRCCloud: Unvalidated Channel names causes IRC Command Injection
IRCCloud does not validate the channel names created by a user causing it to be parsed as an IRC command such as QUIT. This means the user can have their clients force-closed by a malicious channel name. This could also lead to other command injections such as forcing the handover of channels to...
rsyslog -- remote syslog PRI vulnerability
The rsyslog project reports: potential abort when a message with PRI 191 was processed if the "pri-text" property was used in active templates, this could be abused to a remote denial of service from permitted senders The original fix for CVE-2014-3634 was not adequate...
DSA-3039-1 chromium-browser - security update
Bulletin has no description...
python2: Information leakage through integer overflow
It was reported that Python 2.7.8 fixes a potential wraparound in buffer with possible CWE-200 implications. This could allow an attacker to access private information through information leakage. PoC: --- overflow.py --- import sys a = bytearray'here be dragons' b = buffera, sys.maxsize,...
[20140904] - Core - Denial of Service
Inadequate checking allowed the potential for a denial of service attack...
[20140903] - Core - Remote File Inclusion
Inadequate checking allowed the potential for remote files to be executed...
PHP multiple vulnerabilities
The PHP Team reports: insecure temporary file use in the configure script unserialize SPL ArrayObject / SPLObjectStorage Type Confusion Heap buffer over-read in DateInterval fileinfo: cdfreadshortsector insufficient boundary check fileinfo: CDF infinite loop in nelements DoS fileinfo: fileinfo:...
Fixed potential path traversal attack and remote code injection
This is a security release. All users MUST upgrade to this release to prevent two potential security issues: path traversal attack remote code injection These two security issues have been reported by Andreas Forsblom. THANKS! Below is the original report Andreas sent me: Hi William, First, thank...
SUSE-SU-2015:0901-1 Security update for libtasn1
libtasn1 has been updated to fix three security issues: asn1getbitder could have returned negative bit length CVE-2014-3468 Multiple boundary check issues could have allowed DoS CVE-2014-3467 Possible DoS by NULL pointer dereference in asn1readvaluetype CVE-2014-3469 Security Issues: CVE-2014-346...
redmine -- information leak vulnerability
Redmine reports: Potential data leak project names in the invalid form authenticity token error screen...
Opera Web Browser 9.26 - Multiple Security Vulnerabilities
source: http://www.securityfocus.com/bid/28585/info Opera Web Browser is prone to multiple security vulnerabilities that may allow remote attackers to execute code. These issues lead to memory corruption and may result in remote unauthorized access and denial-of-service attacks. Versions prior to...
Remotesoft .NET Explorer 2.0.1 - Local Stack Overflow PoC
No description provided by source. /usr/bin/ python print -------------------------------------------------------------- print Remotesoft .NET Explorer 2.0.1 Stack Overflow print url: http://www.remotesoft.com/ print author: shinnai print mail: shinnaiatautisticidotorg print site:...
Blog System 1.x Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/39406/info Blog System is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file-include, SQL-injection, and...
Poison Ivy 2.3.2 C&C Server Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
cfingerd 1.4.1/1.4.2/1.4.3 Utilities Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in cfingerd makes it possible for...
Skull-Splitter Guestbook 1.0/2.0/2.2 - Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13632/info Skull-Splitter Guestbook is prone to multiple HTML injection vulnerabilities. It is possible to inject HTML and script code into the title and content of posted messages. The attacker-supplied HTML and script...
CuteNews 1.3 Comment HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10750/info CutePHP is reported prone to an HTML injection vulnerability. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to comment posts are not...
AJ HYIP MERIDIAN (news.php id) Blind SQL Injection Vulnerability
No description provided by source. AJ HYIP MERIDIAN news.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - about AJ HYIP: AJ HY...
Pligg 9.9.5 'CAPTCHA' Registration Automation Security Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/30518/info Pligg is prone to a security-bypass weakness. Successfully exploiting this issue will allow an attacker to register multiple new users through an automated process. This may lead to other attacks. Pligg 9.9.5 i...
unbreakable enterprise kernel security update
2.6.39-400.215.3 - SELinux: Fix kernel BUG on empty security contexts. Stephen Smalley Orabug: 19028380 CVE-2014-1874 - floppy: don't write kernel-only members to FDRAWCMD ioctl output Matthew Daley Orabug: 19028444 CVE-2014-1738 - floppy: ignore kernel-only members in FDRAWCMD ioctl input Matthe...