[SECURITY] Fedora 25 Update: rpm-4.13.0.2-1.fc25

The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a...

HackerOne: Introspection query leaks sensitive graphql system information.

Summary: Interospection query leaks sensitive data. Introduction As we know graphql was initially developed and used by facebook as an internal query language and so the features of graphql mostly revolve around internal and development areas. Graphql executes queries using a type system with the...

CVE-2016-9054

An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function assindexsimatchlistbysetbinid resulting in remote code execution. An attacker can...

CVE-2016-9052

An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function assindexsimatchbyiname resulting in remote code execution. An attacker can simply...

PT-2017-2401 · Aerospike · Aerospike Database Server

Name of the Vulnerable Software and Affected Versions: Aerospike Database Server version 3.10.0.3 Description: A stack-based buffer overflow issue exists in the querying functionality. This can be triggered by a specially crafted packet, causing a buffer overflow in the as sindex simatch list by...

SecNews: Querying private posts and changing post meta

Summary --- Unauthenticated user can run arbitrary post queries and insert arbitrary numeric post meta via vulnerable /wp-content/themes/SecNews-NewCustom/functions/ajax.php file. I'm including two exploits in one report because the fix for both is the same, i.e. delete ajax.php. Run arbitrary po...

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in Adobe Pepper Flash for Google Chrome due to an incorrect limitation of the SWF file format. Exploiting this vulnerability allows malicious actors to carry out attacks on endpoints using JSONP requests through Cross-Site Request Forgery CSRF. These actors can gain acces...

Design/Logic Flaw

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by 1 querying or 2 updating a cgroup...

CVE-2015-1342

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by 1 querying or 2 updating a cgroup...

Oracle Forms and Reports 11.1 - Remote Exploit

No description provided by source. !/usr/bin/env ruby Exploit Title: Oracle Reports 11.1 About: Automated exploit for CVE-2012-3153/CVE-2012-3152 Google Dork: inurl:/reports/rwservlet/ Date: 01/28/2014 Exploit Author: Mekanismen [email protected] Credits to: @misssudo for initial disclosure...

MagicTree - Penetration Tester Productivity Tool

Have you ever spent ages trying to find the results of a particular portscan you were sure you did? Or grepping through a bunch of files looking for data for a particular host or service? Or copy-pasting bits of output from a bunch of typescripts into a report? We certainly did, and that's why we...

DEBIAN-CVE-2013-1981

Multiple integer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XQueryFont, 2 XF86BigfontQueryFont, 3 XListFontsWithInfo, 4 XGetMotionEvents, 5 XListHosts, 6...

ReciPHP 1.1 SQL Injection Vulnerability

ReciPHP version 1.1 suffers from a remote SQL injection vulnerability. '/ -.- --------------------oOO------OOo---------------------- | ReciPHP 1.1 SQL Injection Vulnerability | --------------------------------------------------------- ! Discovered: cr4wl3r ! Site: http://0xuht.org ! Download:...

Fedora Update for rpm FEDORA-2011-13766

Check for the Version of rpm OpenVAS Vulnerability Test Fedora Update for rpm FEDORA-2011-13766 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Penetration Tester Productivity Tool: MagicTree

MagicTree is a penetration tester productivity tool. It is designed to allow easy and straightforward data consolidation, querying, external command execution and yeah! report generation. In case you wonder, “Tree” is because all the data is stored in a tree structure, and “Magic” is because it i...

HITB2011KUL - Attacking Privacy of Social Network Users

Document Title: =============== HITB2011KUL - Attacking Privacy of Social Network Users References: =========== Download: http://www.vulnerability-lab.com/resources/videos/425.wmv View: http://www.youtube.com/watch?v=xGuV0Om67n8 Release Date: ============= 2012-02-05 Vulnerability Laboratory ID...

dns-nsid NSE Script

Retrieves information from a DNS nameserver by requesting its nameserver ID nsid and asking for its id.server and version.bind values. This script performs the same queries as the following two dig commands: - dig CH TXT bind.version @target - dig +nsid CH TXT id.server @target References: 1 2...

Metasploit with MYSQL in BackTrack 4 r2-vulnerability warning-the black bar safety net

Until the release of BackTrack 4 r2, it was possible to get Metasploit working with MYSQL but it was not an altogether seamless experience. Now, however, Metasploit and MYSQL work together “out of the box” so we thought it would be great to highlight the integration. With the Metasploit team movi...

LDAP Injection Proof Of Concept

Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano, all.indonesian like a coding,...

GLSA-200608-24 : AlsaPlayer: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200608-24 AlsaPlayer: Multiple buffer overflows AlsaPlayer contains three buffer overflows: in the function that handles the HTTP connections, the GTK interface, and the CDDB querying mechanism. Impact : An attacker could exploit...