Vulnerability of Microsoft SQL Server software, allowing a malicious entity to compromise protected information

Cross-site execution of scripts in SQL Master Data Services MDS allows a malicious actor to inject a script into a user’s Internet Explorer. With the help of this script, a malicious actor can replace the content on the website, gain access to confidential information, or perform any action on th...

The vulnerability of Google Chrome’s browser allows a malicious actor to trigger a service failure due to a numerical overflow in the data replacement functions.

Google Chrome browser contains a vulnerability related to multiple integer overflows in the data replacement function implemented in the CharacterData interface in core/dom/CharacterData.cpp of Blink. Exploiting this vulnerability allows malicious actors to cause service failures or otherwise...

The vulnerability of the Linter Bastion database management system allows a malicious individual to replace and execute the executable file.

If the database management system Linter Bastion was installed without the “loltp.exe” module being installed, a malicious individual can place any executable file named “loltp.exe” in a directory that will be scanned by the executable file loader. Then, using RPC calls with numbers 0x1A...

The vulnerability of the Serv-U File Server allows a malicious attacker to execute arbitrary JavaScript code in the user’s browser, to replace the default content, or to redirect traffic to a specified resource.

The vulnerability of the Serv-U File Server software lies in insufficient checks on the parameters transmitted by clients and the scripts used in HTM scenarios. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser, replace the displayed...

The vulnerability of Google Chrome’s browser allows a malicious actor to replace URLs.

Google Chrome browser contains a vulnerability related to the incorrect processing of bidirectional IRI identifiers in the UnescapeURLWithOffsetsImpl function in net/base/escape.cc. Exploiting this vulnerability allows malicious actors to replace URLs with specially crafted Unicode text that is...

The vulnerability of Google Chrome’s browser allows a malicious actor to replace the user interface.

Google Chrome browser contains a vulnerability in the ScrollView::paint function located in platform/scroll/ScrollView.cpp. This vulnerability allows malicious actors to remotely replace the user interface by expanding the scroll bar on the parent frame...

AIX 7.1 TL 4 : bind (IV84458) (deprecated)

https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...

AIX 6.1 TL 9 : bind (IV84456) (deprecated)

https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...

AIX 5.3 TL 12 : bind (IV85298) (deprecated)

https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...

The plant controller has a remote vulnerability and no patch-vulnerability warning-the black bar safety net

Power station use of an industrial control system has not patched the vulnerability, an attacker can remotely exploit it to gain network control. Remedy method? Turning off the function or replace the equipment. Power station use of an industrial control system has not patched the vulnerability, ...

Riot Games League of Legends - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits ------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril Vallicari i give credit also...

IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems

In the latter half of 2015, the FireEye Labs Advanced Reverse Engineering FLARE team identified several versions of an ICS-focused malware crafted to manipulate a specific industrial process running within a simulated Siemens control system environment. We named this family of malware IRONGATE...

Apache ActiveMQ Fileserver Remote Code Execution Vulnerability

Apache ActiveMQ is the messaging and integration model provider . A remote code execution vulnerability exists in the Apache ActiveMQ Fileserver web program, which could allow a remote attacker to replace the web application with malicious code to execute remote code on an affected system...

The vulnerability of the ColdFusion interpreter allows attackers to replace the server.

The vulnerability of the ColdFusion interpreter exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the server using a specially crafted certificate...

[SECURITY] Fedora 24 Update: subversion-1.9.4-1.fc24

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

MS16-054: Description of the security update for Word Automation Services on SharePoint Server 2010: May 10, 2016

MS16-054: Description of the security update for Word Automation Services on SharePoint Server 2010: May 10, 2016 Summary This security update resolves vulnerabilities in Microsoft SharePoint that could allow remote code execution if a user opens a specially crafted Office file. To learn more abo...

MS16-054: Description of the security update for Office 2016 for Mac: May 10, 2016

None None...

MS16-065: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows Server 2012: May 10, 2016

MS16-065: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows Server 2012: May 10, 2016 View products that this article applies to. Summary This security update resolves a vulnerability in the Microsoft .NET Framework. The vulnerability could cause information...

The vulnerability of the operating system for Clustered Data ONTAP storage systems allows a attacker to obtain confidential information or replace servers.

The vulnerability of the Clustered Data ONTAP operating system exists due to the lack of verification of X.509 certificate checks for the TLS server. Exploiting this vulnerability allows a malicious actor to replace the server remotely or obtain confidential information using a specially crafted...

The vulnerability of the Android operating system allows a hacker to replace the server

The vulnerability of the caching function in the TrustManagerImpl class TrustManagerImpl.java of the Conscrypt component in the Android operating system is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace servers by accessing...