Cisco Releases Security Updates for Web Security Appliances

Cisco has released security updates to address multiple vulnerabilities in Web Security Appliances. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of the affected network device. Users and administrators are encouraged to review the Cisco Security...

Buffalo LinkStation 1.34 / 1.69 / 1.70 Authentication Bypass

Advisory: Buffalo LinkStation Authentication Bypass An authentication bypass vulnerability in the web interface of a Buffalo LinkStation Duo Network Attached Storage NAS device allows unauthenticated attackers to gain administrative privileges. This puts the confidentiality and integrity of the...

CVE-2015-6969

Cross-site scripting XSS vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link...

CVE-2015-6969

Cross-site scripting XSS vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link...

CVE-2015-6969

Cross-site scripting XSS vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link...

CVE-2015-6969: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link...

ModX Revolution 2.3.5-pl Cross Site Scripting Vulnerability

ModX Revolution version 2.3.5-pl suffers from a reflective cross site scripting vulnerability. ModX Revolution 2.3.5-pl: Reflected Cross Site Scripting Vulnerability Security Advisory – Curesec Research Team 1. Introduction Affected Product: ModX Revolution 2.3.5-pl Fixed in: not fixed Fixed...

php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022)

Integer overflow in the ftpgenlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because ...

php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022)

Integer overflow in the ftpgenlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because ...

Putty 0.64 Denial Of Service

Exploit title: putty v0.64 denial of service vulnerability Date: 5-6-2015 Vendor homepage: http://www.chiark.greenend.org.uk Software Link: http://the.earth.li/sgtatham/putty/latest/x86/putty-0.64-installer.exe Version: 0.64 Author: 3unnym00n Details: -------- when doing the ssh dh group exchange...

Putty 0.64 - Denial of Service

Putty 0.64 - Denial of Service ''' Exploit title: putty v0.64 denial of service vulnerability Date: 5-6-2015 Vendor homepage: http://www.chiark.greenend.org.uk Software Link: http://the.earth.li/sgtatham/putty/latest/x86/putty-0.64-installer.exe Version: 0.64 Author: 3unnym00n Details: --------...

Discuz的一处越权操作强制回复无权限帖子

简要描述： 不是某些用户组的也可以回复，获取隐藏的内容 详细说明： 先注册一个账户 随便找一处vip教程 接下来 我们审查元素 找到这段代码 然后修改 回复 接着 我们再点回复 然后就可以获取特定用户群才能回复且必须回复才能获得隐藏内容的内容了 漏洞证明： https://images.seebug.org/upload/201505/18193006d7af9bcc20...

DEBIAN-CVE-2015-3294

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

PT-2015-6077

Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.6.5 Description The issue is related to the improper validation of state in the SSH MSG NEWKEYS and SSH MSG KEXDH REPLY packet handlers. This allows remote attackers to cause a denial of service, resulting in a NULL...

libssh 'ssh_packet_kexdh_init()' denial of service vulnerability

libssh is a C library that implements the SSH2 protocol. In versions of libssh before 0.6.5, an error in the "sshpacketkexdhinit" function src/server.c when processing SSHMSGNEWKEYS and SSHMSGKEXDHREPLY packets can be exploited to cause a denial of service...

UBUNTU-CVE-2015-3294

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

Max Ping Echo Reply Size

An attacker might send an echo reply with large data, trying to compromise the security of the victim's machine...

Chrony Memory Corruption Vulnerability

Chrony is a tool for computer time synchronization that implements the NTP protocol and can be used as both a client-side and a server-side program, which is particularly suitable for maintaining computer time accuracy in environments without network connectivity. Chrony has uninitialized pointer...

PT-2015-5892

Name of the Vulnerable Software and Affected Versions Hotspot Express hotEx Billing Manager version 73 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the reply parameter in the /cgi-bin/hotspotlogin.cgi API endpoint...

CVE-2015-2781: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express hotEx Billing Manager 73 allows remote attackers to inject arbitrary web script or HTML via the reply parameter...