73 matches found
CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
binutils security and bug fix update
2.30-73.0.1 - Forward-port of Oracle patches from 2.30-68.0.2. - Reviewed-by: Elena Zannoni 2.30-68.0.2 - Backport the non-cycle-detecting-capable deduplicating CTF linker - Backport a fix for an upstream hashtab crash no upstream bug number, triggered by the above. - Fix deduplication of...
Phish Uses Google's URL Decoding to Swim Past Defenses
A phishing campaign that takes advantage of Google’s ability to decode non-ASCII URL data on the fly is making the rounds – looking to fool the unsavvy by effectively hiding the website address of the campaign’s phishing page. The campaign makes use of what’s called percentage-based URL encoding ...
Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2018-07092)
Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. Mozilla Firefox suffers from a buffer overflow vulnerability when manipulating SVG animatedPathSegList via scripting. An attacker can exploit this vulnerability to cause a denial of service...
libetpan -- null dereference vulnerability in MIME parsing component
rwhitworth reports: I was using American Fuzzy Lop afl-fuzz to fuzz input to the mime-parse test program. Is fixing these crashes something you're interested in? The input files can be found here: https://github.com/rwhitworth/libetpan-fuzz/. The files can be executed as ./mime-parse idfilename t...
Fedora 22 : rpcbind-0.2.3-0.3.fc22 (2015-9eee2fbc78)
rpcbind-0.2.3-0.4.fc23 - Fixed Seg fault in PMAPCALLIT code bz1264351 rpcbind-0.2.3-0.3.fc22 - Fixed Seg fault in PMAPCALLIT code bz 1264351 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
UBUNTU-CVE-2014-9676
The segwritepacket function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service "invalid memory handler" and possibly execute arbitrary code via a crafted video that triggers a use after free...
Fedora 11 : mapserver-5.2.3-1.fc11 (2009-9230)
Changelog is: Changing imagepath and imageurl no longer allowed via URL 1836 New fix for incomplete CVE-2009-0840 security fix made in 5.2.2 2943 Fixed seg fault if font not found with label ANGLE FOLLOW 2973 Note that Tenable Network Security has extracted the preceding description block directl...
Fedora 10 : mapserver-5.2.3-1.fc10 (2009-9243)
Changelog is: Changing imagepath and imageurl no longer allowed via URL 1836 New fix for incomplete CVE-2009-0840 security fix made in 5.2.2 2943 Fixed seg fault if font not found with label ANGLE FOLLOW 2973 Note that Tenable Network Security has extracted the preceding description block directl...
Unfixed XSS vulnerability at www.seg-social.es
Security researcher hades, has submitted on 02/09/2008 a cross-site-scripting XSS vulnerability affecting www.seg-social.es, which at the time of submission ranked 19611 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It is currentl...
SuSE 10 Security Update : novell-lum (ZYPP Patch Number 2053)
This patch provides fixes for : - overwriting user surename with cn - memory leek - redundant calls to LDAP - security vulnerability - issue with returning partial list for group members if buffer size passed to LUM is too small - issues related to uninitialized structure/variable when LUM runs...
Melange Chat Server 1.10 Remote Buffer Overflow Exploit
No description provided by source. / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia [email protected] 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible t...
