Python-Pickle-Class-Constructor

Python is an open source, object oriented programming language. The Python Pickle module is provided to convert object variables into a serialized form "pickling", and later recover the data back into an object hierarchy "unpickling". A vulnerability has been reported in the Pickle implementation...

[SECURITY] Fedora 21 Update: erlang-17.4-1.fc21

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

[SECURITY] Fedora 21 Update: golang-1.3.3-1.fc21

The Go Programming Language...

[SECURITY] Fedora 20 Update: python-2.7.5-15.fc20

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...

php: heap-based buffer overflow in DNS TXT record parsing

A heap-based buffer overflow flaw was found in the way PHP parsed DNS TXT records. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to execute arbitrary code as the PHP interpreter if a PHP application used the dnsgetrecord function to perform a DNS query...

[SECURITY] Fedora 19 Update: golang-1.3.3-1.fc19

The Go Programming Language...

[SECURITY] Fedora 20 Update: golang-1.3.3-1.fc20

The Go Programming Language...

DSA-3013-1 s3ql - security update

Bulletin has no description...

Python 1.5/1.6/2.0/2.1.x Pickle Class Constructor Arbitrary Code Execution

No description provided by source. source: http://www.securityfocus.com/bid/5257/info Python is an open source, object oriented programming language. The Python Pickle module is provided to convert object variables into a serialized form pickling, and later recover the data back into an object...

PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability

No description provided by source. PHP - gd library - imageRotatefunction Information Leak Vulnerability Discovered by: Hamid Ebadi, Further research and exploit: Mohammad R. Roohian CSIRT Team Members Amirkabir University APA Laboratory Introduction PHP is a popular web programming language whic...

Free MP3 CD Ripper 2.6 - 0day (1)

No description provided by source. Exploit Title: Free MP3 CD Ripper 2.6 wav 0-day Date: 30/03/2010 Author: Richard leahy Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 to exploit this open up the application select file -...

[SECURITY] Fedora 20 Update: python-2.7.5-13.fc20

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...

Apple's New Swift Programming Language for iOS And OS X Apps. Goodbye Objective-C

The development of self own languages has become emblematic of the hot new trend in business as every big Internet service provider is now developing their own and unique programming languages. Two months ago, Facebook released its modern programming language called 'HACK', which is specially...

Ruby security vulnerabilities

DoS, restrictions bypass...

CVE-2013-5655

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. dot dot in the default URI...

Syhunt Advisory: CGILua session.lua Predictable Session ID Vulnerability

Syhunt Advisory: CGILua session.lua Predictable Session ID Vulnerability Advisory-ID: 201404301 Discovery Date: 03.27.2014 Release Date: 04.30.2014 Affected Applications: CGILua 5.0.x, CGILua 5.1.x., CGILua 5.2 alpha 1 & CGILua 5.2 alpha 2 Class: Predictable Session ID Status: Unpatched/Vendor...

HACK - A New Open Source Programming Language developed by Facebook

Facebook just released a new programming language called 'HACK', designed to build complex websites and other software quickly and without many flaws. The company has already migrated almost all of its PHP-based social networking site to HACK over the last year, but it has nothing to do with...

Python socket.recvfrom_into() remote buffer overflow exploit

Proof of concept, that demonstrated the remote exploitability of this python socket flaw, if the python code uses recvfrominto unsafelly. To avoid NX, ret2libc can be used thanx to !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit...

[SECURITY] Fedora 20 Update: python-2.7.5-10.fc20

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...

Python多个安全漏洞

CVE ID:CVE-2013-1752、CVE-2013-4238 Python是一款开放源代码的脚本编程语言。 Python存在多个安全漏洞，允许远程攻击者利用漏洞进行伪造攻击和进行拒绝服务攻击。 1，Python SSL模块没有正确处理服务器SSL证书中的"subjectAltNames"通用名的空字节，允许攻击者通过中间人攻击进行服务器伪造攻击，可获取敏感信息。 2，不受限的调用Lib/httplib.py中的"readline"可导致消耗大量内存资源，造成拒绝服务攻击。 3，不受限的调用Lib/ftplib.py中的"readline"可导致消耗大量内存资源，造成拒绝服务攻击。...