Microsoft Windows - Kernel win32k.sys TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=684 We have encountered a Windows kernel crash in the win32k.sys driver while processing a corrupted TTF font file. An example of a crash log excerpt generated after triggering the...

Microsoft Windows Kernel - 'win32k.sys' TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=684 We have encountered a Windows kernel crash in the win32k.sys driver while processing a corrupted TTF font file. An example of a crash log excerpt generated after triggering the bug is shown below: --- BADPOOLHEADER 19 The pool ...

Joyent Node.js validator security bypass vulnerability (CNVD-2016-02546)

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...

Joyent Node.js validator security bypass vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...

Medium: foomatic

Issue Overview: It was discovered that foomatic-rip failed to remove all shell special characters from inputs used to construct command lines for external programs run by the filter. An attacker could possibly use this flaw to execute arbitrary commands. CVE-2015-8560 It was discovered that the...

Bronko Blue, Halloween Special - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Bronko Blue, Halloween Special published at the 'play' market has multiple vulnerabilities...

Special Enquiry Detail 2 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Special Enquiry Detail 2 published at the 'play' market has multiple vulnerabilities...

Special Enquiry Detail® - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Special Enquiry Detail® published at the 'play' market has multiple vulnerabilities...

Doodle Jump Easter Special - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Doodle Jump Easter Special published at the 'play' market has multiple vulnerabilities...

Scientific Linux Security Update : foomatic on SL6.x i386/x86_64 (20160323)

It was discovered that the unhtmlify function of foomatic-rip did not correctly calculate buffer sizes, possibly leading to a heap-based memory corruption. A malicious attacker could exploit this flaw to cause foomatic-rip to crash or, possibly, execute arbitrary code. CVE-2010-5325 It was...

HP System Management Homepage Privilege Control Vulnerability

HP System Management Homepage is a Web-based interface published by HP. A security vulnerability in HP System Management Homepage allows remote attackers to exploit the vulnerability by submitting a special request to take control of the system...

HP System Management Homepage Data Modification Vulnerability (CNVD-2016-01741)

HP System Management Homepage is a Web-based interface published by HP. A security vulnerability exists in HP System Management Homepage that could be exploited by a remote attacker to submit a special request to access or modify data on the system...

Google Chrome Remote Code Execution Vulnerability (CNVD-2016-01638)

Google Chrome is a web browser developed by the American company Google. Google Chrome handles special PDF files with a security vulnerability that allows a remote attacker to build special PDFs that can be tricked into parsing the application, which can crash the application or execute arbitrary...

Critical: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

New Relic: Unauthorized Access

Summary of Findings ------------------------------- The remote server https://download.newrelic.com allowed unauthenticated access to special access files that are only intended to be accessible after contacting the New Relic program managers as seen below. Exploiting the...

Buffalo LinkStation 420 Denial of Service Vulnerability

The Buffalo LinkStation 420 is a NAS network storage from Japan's Bafaello Group. A security vulnerability exists in the Buffalo LinkStation 420 that allows remote attackers to conduct denial-of-service attacks by submitting a special request to shut down the device...

Ruby on Rails Action Pack Denial of Service Vulnerability

Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Pack is one of the components used to build and test MVC Web applications . A security vulnerability in Ruby on Rails Action Pack allows remote attackers to conduct deni...

phpMyAdmin Information Disclosure Vulnerability (CNVD-2016-00892)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A security vulnerability exists in phpMyAdmin that allows remote attackers to exploit the vulnerability to submit special requests to obtain sensitive information...

Apache Subversion < 1.7.19, 1.8.x < 1.8.11 DoS Vulnerability (Feb 2016)

Apache Subversion is prone to a denial of service DoS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Open-Xchange Appsuite Information Disclosure Vulnerability (CNVD-2016-00986)

Open-Xchange AppSuite is a set of Web-based cloud desktop environments from the US-based Open-Xchange. A security vulnerability exists in Open-Xchange AppSuite that allows remote attackers to submit special requests to obtain sensitive information...