kernel: soft lockup on aio

It was found that due to excessive fileslock locking, a soft lockup could be triggered in the Linux kernel when performing asynchronous I/O operations. A local, unprivileged user could use this flaw to crash the system...

CVE-2014-8172: Undefined Security Weakness

The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service soft lockup or system crash via unspecified use of Asynchronous I/O AIO operations...

kernel: soft lockup on aio

It was found that due to excessive fileslock locking, a soft lockup could be triggered in the Linux kernel when performing asynchronous I/O operations. A local, unprivileged user could use this flaw to crash the system...

X3 CMS 0.5.1.1 Cross Site Request Forgery / Cross Site Scripting

Product: X3 CMS 0.5.1 & 0.5.1.1 Vendor: X3 CMS Vulnerable Versions: 0.5.1 and 0.5.1.1 Tested Version: 0.5.1.1 Vendor Notification: 2 Nov , 2014 Vendor Patch: 7 Nov, 2014 Advisory Publication: 8 Nov, 2014 Public Disclosure: 8 November , 2014 Vulnerability Type: CSRF + Reflected Cross Site Scriptin...

XOOPS Module RM and Soft Gallery SQL Injection (CVE-2007-1806)

An SQL injection vulnerability has been reported in Red Mexico Rm+soft Gallery. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

X3 CMS 0.5.1.1 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

X3 CMS versions 0.5.1 and 0.5.1.1 suffer from cross site request forgery and cross site scripting vulnerabilities. Product: X3 CMS 0.5.1 & 0.5.1.1 Vendor: X3 CMS Vulnerable Versions: 0.5.1 and 0.5.1.1 Tested Version: 0.5.1.1 Vendor Notification: 2 Nov , 2014 Vendor Patch: 7 Nov, 2014 Advisory...

MODx CMS 2.2.14 - Cross-Site Request Forgery Bypass / Reflected Cross-Site Scripting / Persistent Cross-Site Scripting

Advisory ID: 92152 Product: MODX Revolution Vendor: MODX Vulnerable Versions: 2.0.0–2.2.14 Tested Version: 2.2.14 Advisory Publication: 16 July, 2014 without technical details Vendor Notification: 16 July, 2014 Vendor Patch: 15 July, 2014 Public Disclosure: 2 November , 2014 Vulnerability Type:...

Wget FTP soft link attack Vulnerability CVE-2 0 1 4-4 8 7 7 Description and various security vendor assessment-vulnerability warning-the black bar safety net

Wget is used to download from the network file of open source tools, use very extensive. Now, however, it appears a serious security vulnerability: when Wget toFTP serverrequest recursive directory, there is a about a soft link vulnerability, it will allow hackers to arbitrarily create a file,...

GS Foto Uebertraeger 3.0 iOS - File Include Vulnerability

No description provided by source. Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID:...

GS Foto Uebertraeger 3.0 iOS - Local File Inclusion

GS Foto Uebertraeger 3.0 iOS - Local File Inclusion Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability...

GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability

Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ====================================...

GS Foto Uebertraege 3.0 Local File Inclusion

Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ====================================...

GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability

Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ====================================...

GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability

Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ====================================...

Sql injection

Multiple SQL injection vulnerabilities in Bank Soft Systems BSS RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the 1 CARDS or 2 XACTION parameter...

CVE-2014-4197

Multiple SQL injection vulnerabilities in Bank Soft Systems BSS RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the 1 CARDS or 2 XACTION parameter...

PT-2014-5730

Name of the Vulnerable Software and Affected Versions Bank Soft Systems BSS RBS BS-Client version 3.17.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the CARDS or XACTION parameter. Recommendations For Bank Soft Systems BSS RBS BS-Client...

CVE-2014-4197: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Bank Soft Systems BSS RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the 1 CARDS or 2 XACTION parameter...

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

PwnStar - Script for multi attack (for all your fake-AP needs!)

A bash script to launch a Soft AP, configurable with a wide variety of attack options. Includes a number of index.html and server php scripts, for sniffing/phishing. Can act as multi-client captive portal using php and iptables. Launches classic exploits such as evil-PDF. De-auth with aireplay,...