AIX OpenSSH Vulnerability : openssh_advisory5.asc

The version of OpenSSH running on the remote host is affected by a security bypass vulnerability due to a failure to check the refusal deadline during the forwarding of untrusted X11 connections. A remote attacker can exploit this to bypass timeout checks and XSECURITY restrictions. %NASLMINLEVEL...

Adobe AIR < 18.0.0.180 Multiple Vulnerabilities (APSB15-16)

Binary data 8858.prm...

PHP 5.5.9 - 'zend_executor_globals' 'CGIMode FPM WriteProcMemFile' disable_functions Bypass / Load Dynamic Library

?php // EDB Note: Paper https://www.exploit-db.com/docs/english/38104-shoot-zendexecutorglobals-to-bypass-php-disablefunctions.pdf errorreporting0x66778899; settimelimit0x41424344; define'ZENDINIUSER', 10; define'ZENDINIPERDIR', 11; define'ZENDINISYSTEM', 12; / 00df9000-00e16000 rw-p 00000000 00:...

Microsoft Windows Hyper-V Security Feature Bypass Vulnerability

Hyper-V is a technology based on the Virtual Machine Monitor that provides a scalable, reliable and highly available virtualization platform. A security feature bypass vulnerability exists in Microsoft Windows 8.1, Windows Server 2012 R2, Windows 10, which can be exploited by an attacker to bypas...

OpenSSH Security Bypass Vulnerability

OpenSSH is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

Microsoft Windows Kernel Local Security Bypass Vulnerability

Microsoft Windows Kernel is a dynamic link library file in Windows. A local security bypass vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

CVE-2015-2504

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 improperly counts objects before performing an array copy, which allows remote attackers to 1 execute arbitrary code via a crafted XAML browser application XBAP or 2 bypass Code Access Security restrictions via a crafted...

Microsoft Internet Explorer CVE-2015-2484 Tampering Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security bypass vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions...

Microsoft Edge security bypass (MS15-094: CVE-2015-2484)

A tampering vulnerability has been reported in Microsoft Edge. The vulnerability is due to improper misuse of the COM interface. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Edge...

PT-2015-2030 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2 through 4.6 Description: The issue is caused by improper object counting before performing an array copy, allowing remote attackers to execute arbitrary code or bypass Code Access Security restriction...

Microsoft Windows Kernel CVE-2015-2529 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Avaya Meeting Exchange - Client Registration Server 6.0 Avaya Meeting Exchange ...

Microsoft Windows Hyper-V CVE-2015-2534 Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Windows 10 for x64-based Systems...

MS15-105: Vulnerability in Windows Hyper-V Could Allow Security Feature Bypass (3091287)

The remote Windows host is affected by a security bypass vulnerability in Windows Hyper-V due to improper application of access control list ACL configuration settings. A local attacker can exploit this, via a specially crafted application, to cause Hyper-V to allow unintended network traffic. C...

Google Chrome Multiple Vulnerabilities-01 (Sep 2015) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

KLA10803 VMware Workstation 10.x end of life

VMware announced the end of support for VMware Workstation 10.x. Users should immediately make transition to VMware Workstation 11.x or later Original advisories https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/support/product-lifecycle-matrix.pdf Related products...

CVE-2015-1297

CVE-2015-1297 affects Google Chrome’s WebRequest API (extensions/browser/api/web_request/web_request_api.cc) where the request source is not properly validated, allowing remote attackers to bypass access restrictions via a crafted app or extension. The vulnerability is fixed in Chrome 45.0.2454.8...

Fortinet FortiOS 5.0.x < 5.0.5 FortiToken Security Bypass

The remote host is running a version of Fortinet FortiOS 5.0.x prior to 5.0.5. It is, therefore, affected by a security bypass vulnerability due to an unspecified flaw in FortiToken. An unauthenticated, remote attacker can exploit this to successfully authenticate even when a token is locked. C...

Fortinet FortiOS 5.0.x < 5.0.2 Multiple Vulnerabilities

The remote host is running a version of Fortinet FortiOS 5.0.x prior to 5.0.2. It is, therefore, affected by the following vulnerabilities : - A security bypass vulnerability exists due to a flaw when using SMTP. An unauthenticated, remote attacker can exploit this to bypass the DLP full content...

Fortinet FortiOS 5.0.x < 5.0.4 Empty Device Group Firewall Bypass

The remote host is running a version of Fortinet FortiOS 5.0.x prior to 5.0.4. It is, therefore, affected by a security bypass vulnerability due to an unspecified flaw that that is triggered during the handling of empty device groups. An unauthenticated, remote attacker can exploit this to bypass...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to bypass security measures

Vulnerabilities of iOS and Mac OS X operating systems exist due to insufficient checking of input data. Exploiting these vulnerabilities can allow a malicious actor, operating locally, to bypass security measures using a specially crafted Mach-O file...