[SECURITY] Fedora 22 Update: sqlite-3.8.9-1.fc22

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

cookie parser out of boundary memory access

libcurl supports HTTP "cookies" as documented in RFC 6265. Together with each individual cookie there are several different properties, but for this vulnerability we focus on the associated "path" element. It tells information about for which path on a given host the cookie is valid. The internal...

[SECURITY] Fedora 22 Update: lasso-2.4.1-3.fc22

Lasso is a library that implements the Liberty Alliance Single Sign On standards, including the SAML and SAML2 specifications. It allows to handle the whole life-cycle of SAML based Federations, and provides bindings for multiple languages...

CVE-2015-0694

Cisco ASR 9000 devices running software around 5.3.0.BASE are affected by CVE-2015-0694 due to an Object-ACL matching flaw (Bug CSCur28806) that can let an unauthenticated, remote attacker bypass ACL restrictions. Impact is potential access to restricted resources or traffic alteration depending ...

[SECURITY] Fedora 20 Update: lasso-2.4.1-1.fc20

Lasso is a library that implements the Liberty Alliance Single Sign On standards, including the SAML and SAML2 specifications. It allows to handle the whole life-cycle of SAML based Federations, and provides bindings for multiple languages...

SAP EMR Unwired and Clinical Task Tracker Access Restriction Bypass Vulnerabilities

SAP EMR Unwired is a mobile app that enables physicians and nurses to instantly access patient data when they need it.SAP Clinical Task Tracker is an easy and secure way to access clinical tasks assigned to your patients anytime, anywhere. SAP EMR Unwired and Clinical Task Tracker fail to properl...

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4018.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.018 Authors: Thomas Rotter...

Fortinet Single Sign On collectoragent.exe stack buffer overflow vulnerability

Fortinet Single Sign On FSSO is a single sign-on solution for Fortinet devices. A stack buffer overflow vulnerability in collectoragent.exe in versions prior to Fortinet Single Sign On FSSO build 164 allows remote attackers to send a specially crafted PROCESSHELLO message to TCP port 8000 to...

Fortinet Single Sign On Stack Overflow Exploit

Exploit for windows platform in category dos / poc 1. Advisory Information Title: Fortinet Single Sign On Stack Overflow Advisory ID: CORE-2015-0006 Advisory URL: http://www.coresecurity.com/advisories/fortinet-single-sign-on-stack-overflow Date published: 2015-03-18 Date of last update: 2015-03-...

CVE-2015-2281

Fortinet Single Sign On (FSSO) collectoragent.exe is affected by a stack-based buffer overflow in the Message Dispatcher when processing a PROCESS_HELLO message. This vulnerable path exists in FSSO builds preceding 164 and allows remote, unauthenticated attackers to execute arbitrary code via a c...

[CORE-2015-0006] - Fortinet Single Sign On Stack Overflow

Advisory Information Title: Fortinet Single Sign On Stack Overflow Advisory ID: CORE-2015-0006 Advisory URL: http://www.coresecurity.com/advisories/fortinet-single-sign-on-stack-overflow Date published: 2015-03-18 Date of last update: 2015-03-18 Vendors contacted: Fortinet Release mode:...

Fortinet Single Sign On Stack Overflow

Advisory ID Internal CORE-2015-0006 1. Advisory Information Title: Fortinet Single Sign On Stack Overflow Advisory ID: CORE-2015-0006 Advisory URL:https://www.coresecurity.com/advisories/fortinet-single-sign-on-stack-overflow Date published: 2015-03-18 Date of last update: 2015-03-18 Vendors...

Fortinet Single Sign On - Stack Overflow

Fortinet Single Sign On - Stack Overflow 1. Advisory Information Title: Fortinet Single Sign On Stack Overflow Advisory ID: CORE-2015-0006 Advisory URL: http://www.coresecurity.com/advisories/fortinet-single-sign-on-stack-overflow Date published: 2015-03-18 Date of last update: 2015-03-18 Vendors...

Fortinet Single Sign On - Stack Overflow

Advisory Information Title: Fortinet Single Sign On Stack Overflow Advisory ID: CORE-2015-0006 Advisory URL: http://www.coresecurity.com/advisories/fortinet-single-sign-on-stack-overflow Date published: 2015-03-18 Date of last update: 2015-03-18 Vendors contacted: Fortinet Release mode:...

XDcms订餐网站系统单店版注入(demo测试)

简要描述： rt 详细说明： 黑盒demo测试 首先注册一个用户，然后修改用户资料 http://dd.xdcms.cn/index.php?m=member&f=edit 修改完成之后，下单点餐。 然后报错了。二次注入 由于demo有安全狗，就没用深入测试了。 漏洞证明：...

Fortinet Single Sign buffer overflow

Buffer overflow on network messages parsing...

CryptoLocker Variant Coming After Gamers

Gamers may soon be feeling the pain of crypto-ransomware. A variant of CryptoLocker is in the wild that goes after data files associated with 20 different online games, locking downloadable content in an attempt to target younger computer users. Researchers at Bromium today said an unnamed...

Wireshark 'pcapng.c' Denial of Service Vulnerability

Wireshark is an open source network protocol analysis tool. The pcapngread function in Wireshark wiretap/pcapng.c handles malicious messages with a single-byte overflow error, allowing an attacker to exploit a vulnerability by submitting a special message to crash the application...

Apple OS X IOAcceleratorFamily Single Byte Memory Error Elevation of Privilege Vulnerability

Apple Mac OS X is a commercial BSD-based operating system. Apple Mac OS X IOAcceleratorFamily has a single-byte overflow memory error that allows attackers to exploit a vulnerability to elevate privileges...