NAP Turbo NAS Series Devices CGI Arbitrary Code Execution Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. A security vulnerability in the NAP Turbo NAS Series Devices CGI allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05383)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Wireshark WaveAgent Parser Denial of Service Vulnerability

Wireshark is an open source protocol analysis program. A security vulnerability exists in the Wireshark WaveAgent parser that allows an attacker to exploit the vulnerability by submitting special messages to be parsed to crash the application...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05379)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05375)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05382)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple iOS Libc TRE library memory corruption vulnerability (CNVD-2015-05565)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the Apple iOS Libc TRE, which allows an attacker to exploit the vulnerability to cause an application to process special rule expressions to execute arbitrary...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05381)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Microsoft Internet Explorer add-on Installer Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape Enhanced Protected Mode on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Drupal Administration Views Module Information Disclosure Vulnerability

Drupal is a free, open source content management system developed in PHP.Administration Views is a module for replacing administration overview or list pages. A security vulnerability exists in the Drupal Administration Views module that allows remote attackers to submit special requests to obtai...

Cisco Prime Collaboration Assurance Web Interface Denial of Service Vulnerability

Cisco Prime Collaboration provides IT staff with a single unified management console for the vast majority of Cisco collaboration products. A security vulnerability in the Cisco Prime Collaboration Assurance Web interface allows remote users to submit special requests to destabilize the WEB...

NTP Denial of Service Vulnerability

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. NTP has an unspecified security vulnerability that could be exploited by a remote attacker to submit a special request that would crash the service program and cause a denial-of-service attack...

PHP 5.5.x < 5.5.27 Multiple Vulnerabilities (BACKRONYM)

According to its banner, the version of PHP 5.5.x running on the remote web server is prior to 5.5.27. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability, known as 'BACKRONYM', exists due to a failure to properly enforce the requirement of an SSL/TL...

Apple QuickTime Memory Corruption Vulnerability (CNVD-2015-04263)

Apple QuickTime is a popular multimedia player. A vulnerability in Apple QuickTime's handling of special movie files allows remote attackers to construct malicious files that can be tricked into being parsed by an application, which can execute arbitrary code in the application context...

Cisco Headend System Releases Denial of Service Vulnerability

Cisco Headend System Releases is a digital broadband transmission system. A security vulnerability in the implementation of Cisco Headend System Releases allows remote attackers to exploit the vulnerability by submitting special requests that cannot be recovered from memory, resulting in a denial...

Cisco Nexus Operating System Devices Command Line Interface Local Privilege Escalation Vulnerability

A vulnerability in the Command Line Interface CLI parser of Cisco Nexus Operating System NX-OS devices could allow an authenticated, local attacker to perform a privilege escalation. The vulnerability is due to improper input validation of special characters within filenames. An attacker could...

GarrettCom Magnum 6K and 10K Switches Remote Denial of Service Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A security vulnerability exists in the GarrettCom Magnum 6K and 10K Switches that allows remote attackers to exploit the vulnerability by submitting a special request to reload the device, resulting in a denial of...

Rack 'normalize_params()' function denial of service vulnerability

Rack is a Ruby Web server interface that unifies APIs for Web servers, Web frameworks, and middleware, and supports calling them using a single method. A security vulnerability in the Rack 'normalizeparams' function allows remote attackers to conduct denial-of-service attacks that can be exploite...

Decision E-Detective Arbitrary Code Execution Vulnerability

Decision E-Detective is a network behavioral auditing system that monitors, parses, backs up and manages network data. A security vulnerability exists in Decision E-Detective that could be exploited by an attacker to execute arbitrary code by submitting a special request...

Встреча Defcon Moscow #9

3 июля, в пятницу, в офисе Mail.Ru Group состоится девятая встреча Defcon Moscow, которую организует группа DC7499. Defcon Moscow — это открытое и независимое сообщество технических энтузиастов, приближенных к области высоких технологий, а также информационной и технической безопасности. Программ...