[SECURITY] Fedora 22 Update: perl-5.20.3-332.fc22

Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

CVE-2016-4529

Schneider Electric SoMachine HVAC programming software for M171/M172 Controllers contains an unsafe ActiveX control (AxEditGrid) with a SetDataIntf dereference vulnerability. The flaw allows remote code execution via an attacker-supplied memory address in the untrusted pointer dereference within ...

CVE-2016-4529

An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...

[SECURITY] Fedora 23 Update: python-2.7.11-7.fc23

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...

PT-2016-6003

Name of the Vulnerable Software and Affected Versions Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers versions prior to 2.1.0 Description The issue allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE FOR UNTRUSTED...

CVE-2016-4529: Undefined Security Weakness

An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...

[SECURITY] Fedora 24 Update: python-2.7.11-8.fc24

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...

[SECURITY] Fedora 22 Update: python-2.7.10-10.fc22

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...

WECON LeviStudio Stack Buffer Overflow Vulnerability

WECON LeviStudio is HMI programming software. WECON LeviStudio handles a stack buffer overflow vulnerability in certain files that could allow an attacker to cause a stack buffer overflow and execute arbitrary code in the context of the current process...

Acrobat Data Compromise

The vulnerability exists in the Acrobat API due to the access to unmaped memory. Exploiting this vulnerability allows attackers to execute arbitrary code by using API calls...

Eaton ELCSoft Programming Software Heap Buffer Overflow Vulnerability

Eaton ELCSoft Programming Software is a suite of software for configuring programmable logic controllers from Eaton Corporation, USA. A heap buffer overflow vulnerability exists in Eaton ELCSoft Programming Software version 2.4.01 and earlier. A remote attacker could exploit this vulnerability to...

RHEL 7 : ocaml (RHSA-2016:1296)

An update for ocaml is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Patched libarchive Vulnerabilities Have Big Reach

The libarchive programming library was recently patched against three critical memory-related vulnerabilities that could be abused to execute code on computers running the vulnerable software. As is the case with most open source software packages, patching the core library is only half the battl...

[SECURITY] Fedora 23 Update: python-2.7.11-4.fc23

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...

PHP Mac OS X Code Execution

The vulnerability of the filecheckmem function in func.sj exists due to buffer overflow. Exploiting this vulnerability allows an attacker to cause a service failure buffer overflow and application termination or execute arbitrary code using a specially created magic file...

Parrot OS 3.0 (Lithium) - Friendly OS designed for Pentesting, Computer Forensic, Hacking, Cloud pentesting, Privacy/Anonimity and Cryptography

Parrot Security OS is a cloud friendly operating system designed for Pentesting, Computer Forensic, Reverse engineering, Hacking, Cloud pentesting, privacy/anonimity and cryptography. Based on Debian and developed by Frozenbox network. Who can use it Parrot is designed for everyone, from the Pro...

Angler Exploit Kit Evading EMET

We recently encountered some exploits from Angler Exploit Kit EK that are completely evading Microsoft’s Enhanced Mitigation Experience Toolkit EMET. This is something we are seeing for the first time in the wild, and we only observed it affecting systems running Windows 7. Angler EK uses complex...

Perl 5.22 Buffer Overflow Vulnerability

Binary data 802000.prm...

libxml2 PHP DoS

The vulnerability of the xslextfunctionphp function ext/xsl/xsltprocessor.c in the libxml2 library and the PHP interpreter is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure dereferencing the null pointer...

Google Wins Epic Java Copyright Case Against Oracle

Google has finally won six-year long $9-billion legal battle with Oracle over the use of Java APIs in Android. Oracle filed its lawsuit against Google in 2010, claiming that the company illegally used 11,500 lines of Java code in its Android operating system, violating copyrights owned by Oracle...