Linux kernel ping 套接字释放后重利用漏洞

No description provided by source...

(Pwn2Own) Apple Safari GraphicsContext Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

(Pwn2Own) Apple Safari ArrayStorage DFG Optimization Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

tomcat: Session fixation

A session fixation flaw was found in the way Tomcat recycled the requestedSessionSSL field. If at least one web application was configured to use the SSL session ID as the HTTP session ID, an attacker could reuse a previously used session ID for further requests...

tomcat: Session fixation

A session fixation flaw was found in the way Tomcat recycled the requestedSessionSSL field. If at least one web application was configured to use the SSL session ID as the HTTP session ID, an attacker could reuse a previously used session ID for further requests...

UBUNTU-CVE-2016-2516

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...

Microsoft Internet Explorer 释放后重用漏洞(MS14-021)

No description provided by source...

Windows bitmap内核释放后重用漏洞(CVE-2016-0094)

No description provided by source...

Firefox Add-On Flaw Leaves Apple And Windows Computers Open To Attack

Researchers warn hundreds of popular Firefox browser extensions are vulnerable to attack that could give hackers control of Mac OS X and Windows computers. Researchers from Northeastern University say the flaw is tied to Firefox’s support for an older browser extension platform and the Mozilla...

Foxit Reader XFA Page prePrint Event Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the Page prePrint event, which could allow the reuse of a pointer that has already been released in the hanging pointer. An attacker could execute arbitrary code in the...

Foxit Reader XFA preOpen Memory Error Referencing Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the preOpen event, which could allow the reuse of a pointer that has already been released in the hanging pointer. An attacker could execute arbitrary code in the current...

Foxit PhantomPDF ListBox Value Memory Error References Remote Code Execution Vulnerability

PhantomPDF is the universal PDF editor. Foxit PhantomPDF has a security vulnerability in the handling of the ListBox value attribute, which can cause the pointer that has been released in the hanging pointer to be reused, and an attacker can execute arbitrary code in the context of the current...

Foxit Reader Revision Number Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of object revision numbers, which could allow the reuse of pointers that have already been released in the hanging pointer. An attacker could execute arbitrary code in the...

Foxit Reader XFA Re-merge After Release Re-exploit Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of XFA forms, which could allow the reuse of a pointer that has been released in the hanging pointer. An attacker can execute arbitrary code in the current process context...

Mozilla Firefox nsHTMLDocument SetBody Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Internet Explorer SNeighborPosition Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

ManageEngine EventLog Analyzer 10.8 Privilege Escalation

ManageEngine EventLog Analyzer v10.8 Date: 2/9/2016 Exploit Author: @GraphX Vendor Homepage: http://www.manageengine.com Version: 10.8 1 Description: It is possible for a remote authenticated attacker using an unprivileged account to gain access to the admin account via parameter manipulation usi...

Microsoft Internet Explorer CSVGAnimatedAngle Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer CACPWrap Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

Updated curl packages fix security vulnerability

libcurl before 7.47.0 will reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. The effect of this flaw is that the application could be reusing a proxy connection using the previously use...