PT-2017-15338

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue is related to an insufficient authorization check. On the Junos Space administrative web interface, readonly users can create privileged users, allowing privilege escalation...

PT-2017-15341

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description An XML External Entity Injection issue may allow an authenticated user to read arbitrary files on the device. Recommendations For versions prior to 16.1R1, update to version 16.1R1 or later to...

PT-2017-15340

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description A reflected cross site scripting issue in the administrative interface may allow remote attackers to steal sensitive information or perform certain administrative actions. Recommendations For...

CVE-2017-2309: Exposure of Sensitive Information to an Unauthorized Actor

On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk...

CVE-2017-2311: Undefined Security Weakness

On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition...

UBUNTU-CVE-2016-5007

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

Scale-Out Backup Repository Free Space Calculation

Challenge Jobs running to a Scale-Out Backup Repository report "No scale-out repository extents have sufficient disk space to store the backup file, " even though some of the extents have adequate free space. Cause At the beginning of a job, if no other jobs are running, Veeam Backup & Replicatio...

Space Coast Credit Union Mobile app SSL Certificate Validation Vulnerability

Space Coast Credit Union SCCU Mobile for iOS and Android is a mobile banking app for iOS and Android from Space Coast Credit Union SCCU Bank, featuring quick access to manage bank accounts, manage balances, pay bills, send money and more! Features. A security vulnerability exists in SCCU Mobile...

Linux Kernel 3.11 < 4.8 0 - SO_SNDBUFFORCE & SO_RCVBUFFORCE Local Privilege Escalation Exploi

Exploit for linux platform in category local exploits // CAPNETADMIN - root LPE exploit for CVE-2016-9793 // No KASLR, SMEP or SMAP bypass included // Affected kernels: 3.11 - 4.8 // Tested in QEMU only // https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-9793 // // Usage: // gcc...

Linux/x86 - Disable ASLR Shellcode (80 bytes)

Linux/x86 - Disable ASLR Shellcode 80 bytes. Shellcode exploit for Linx86 platform / Linux/x86 setuid-disable-aslr.c by @abatchy17 - abatchy.com Shellcode size: 80 bytes SLAE-885 section .text global start start: ; ; setruid0,0 ; xor ecx,ecx mov ebx,ecx push 0x46 pop eax int 0x80 ; ;...

Multiple Quick Heal Product Security Bypass Vulnerabilities

Quick Heal Internet Security, Quick Heal Total Security and Quick Heal AntiVirus Pro are antivirus programs from Quick Heal India. A security vulnerability exists in the PE file in several Quick Heal products due to the program's failure to use the ASLR/DEP protection mechanism. An attacker can...

CVE-2017-3212

The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-3212

The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-3212

CVE-2017-3212 affects the Space Coast Credit Union SCCU Mobile apps: iOS v2.2 and Android v2.1.0.1104, which fail to verify SSL X.509 certificates. This enables MITM attackers to spoof servers and access sensitive information via crafted certificates. Connected sources (NVD, CNVD, CVE listings, C...

PT-2017-15706

Name of the Vulnerable Software and Affected Versions Space Coast Credit Union Mobile app version 2.2 for iOS Space Coast Credit Union Mobile app version 2.1.0.1104 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2017-3212: Improper Certificate Validation

The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-8776

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the...

Shadow Brokers Fix for IBM Lotus Domino Released

IBM has released a patch for Lotus Domino to plug a security flaw which was disclosed in the latest Shadow Broker revelations. Lotus Domino includes an IMAP server. IMAP or Internet Message Access Protocol is an Internet standard protocol used by e-mail clients to retrieve e-mail messages from th...

LibSass: stack overflow #3 in libsass

./sassc test387 /dev/null triggers this stack overflow. ==9081==ERROR: AddressSanitizer: stack-overflow on address 0x7fffb48eadc0 pc 0x00000087a07b bp 0x7fffb48eba30 sp 0x7fffb48ead60 T0 0 0x87a07a in Sass::Parser::parsefactor /home/geeknik/libsass/src/parser.cpp:1379 1 0x878304 in...