PT-2015-7148

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 2.x through 3.10.5S Cisco IOS XE versions 3.11.xS through 3.13.2S Cisco IOS XE versions 3.14.xS through 3.15.0S Description A vulnerability in the processing of IPv4 packets that require Network Address Translation NAT an...

PT-2015-2188

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 41.0 Firefox ESR versions prior to 38.3 Description The issue is related to the AnimationThread function in Firefox and Firefox ESR, which is caused by a buffer overflow due to the incorrect use of the sscanf function...

PT-2015-2186

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Mozilla Firefox ESR versions prior to 38.3 Description The issue is related to an "overflow" in the nsAttrAndChildArray::GrowBy function, which might allow remote attackers to cause a denial of service,...

PT-2015-2142

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 18.0.0.241 Adobe Flash Player versions 19.x prior to 19.0.0.185 Adobe Flash Player versions prior to 11.2.202.521 on Linux Adobe AIR versions prior to 19.0.0.190 Adobe AIR SDK versions prior to 19.0.0.190...

PT-2015-7489

Name of the Vulnerable Software and Affected Versions Boxoft WAV to MP3 Converter affected versions not specified Description A buffer overflow issue in the Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service, potentially leading to a crash, and possibly execute...

[security bulletin] HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and Linux, Multiple Vulnerabilities

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04765115 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04765115 Version: 1 HPSBMU03396 rev.1 - HP Version Control Repository Manager VCR...

CVE-2015-6819

Multiple integer underflows in the ffmjpegdecodeframe function in libavcodec/mjpegdec.c in FFmpeg before 2.7.2 allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted MJPEG data...

CVE-2015-6277: Undefined Security Weakness

The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.21SV31.4, Nexus 3000 devices 7.30ZD0.47, Nexus 4000 devices 4.12E1, Nexus 9000 devices 7.30ZD0.61, and MDS 9000 devices 7.00HSK0.353 and SAN-OS NX-OS on MDS 9000 devices 7.00HSK0.353 allows remote attackers to cause...

PT-2015-7325

Name of the Vulnerable Software and Affected Versions MediaWiki TimedMediaHandler extension affected versions not specified Description The issue concerns the reset functionality in the TimedMediaHandler extension for MediaWiki, which fails to create a new transcode. This allows remote attackers ...

PT-2015-7326

Name of the Vulnerable Software and Affected Versions MediaWiki Quiz extension affected versions not specified Description The issue allows remote attackers to cause a denial of service by using regex metacharacters in a regular expression. Recommendations At the moment, there is no information...

PT-2015-1932

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera affected versions not specified Skia affected versions not specified Description The issue is related to a use-after-free vulnerability in the SkMatrix::invertNonIdentity function. This...

UBUNTU-CVE-2015-5219

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service infinite loop via a crafted NTP packet...

CVE-2015-6244: Improper Input Validation

The dissectzbeesecure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Konica Minolta FTP Utility 1.0 - Remote DoS PoC

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Konica Minolta FTP Utility 1.0 Remote DoS PoC Date: 21-08-2015 Exploit Author: Shankar Damodaran Vendor Homepage: http://www.konicaminolta.com/ Software Link:...

Valhala Honeypot 1.8 - Stack Buffer Overflow

Valhala Honeypot 1.8 - Stack Buffer Overflow """ Exploit Title: Valhala Honeypot Stack based BOFRemote DOS Date: 8/20/2015 Exploit Author: UnN0n Software Developer: Marcos Flavio Araujo Assuncao Software Link: http://sourceforge.net/projects/valhalahoneypot/ Version: 1.8 Tested on: Windows 7 x863...

CVE-2015-4318: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID CSCuv40528...

CVE-2015-0537: Integer Underflow (Wrap or Wraparound)

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition Crypto-C ME before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service...

NeuroServer Remote DoS Vulnerability

NeuroServer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ability FTP Server 2.1.4 - Admin Panel AUTHCODE Command Remote DoS Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title: Ability FTP Server Admin Panel AUTHCODE Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link:...

Ability FTP Server 2.1.4 - afsmain.exe USER Command Remote DoS Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title: Ability FTP Server afsmain.exe USER Command Remote Dos Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.codecrafters.com Software Link:...