Cisco Catalyst 6500 Series Switches Denial of Service Vulnerability

The Cisco Catalyst 6500 Series Switches are a set of 6500 series switch products. A denial of service vulnerability exists in the Cisco Catalyst 6500 Series Switches that could allow a remote attacker to submit a special request to reload the switch, resulting in a denial of service attack...

Microsoft Exchange Server Improperly Manages User Sessions Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. A security vulnerability exists in Microsoft Exchange Server that allows a remote attacker to exploit the vulnerability to submit a special request to access the application in another user's context...

ZTE AC3633R Arbitrary Code Execution Vulnerability

ZTE AC3633R is a wireless modem product from ZTE Corporation. An unspecified security vulnerability exists in the ZTE AC3633R, which could be exploited by a remote attacker to submit a special request and execute arbitrary code...

PGBouncer 'src/client.c' Remote Denial of Service Vulnerability

PGBouncer is a set of lightweight database connection pooling tools for PostgreSQL. A security vulnerability exists in PGBouncer that allows a remote attacker to exploit the vulnerability to submit a special request and crash the application...

Unspecified Remote Denial of Service Vulnerability in PeakHMI HMI

PeakHMI HMI is a Human Machine Interface HMI application. PeakHMI HMI has an unspecified security vulnerability that could be exploited by a remote attacker to submit a special request and crash the application...

NetCat.ru NetCat CMS HTML Injection Vulnerability

NetCat.ru NetCat CMS is a content management system. An HTML injection vulnerability exists in NetCat.ru NetCat CMS, which allows remote attackers to exploit the vulnerability by submitting a special request for an HTML injection attack...

Unspecified Arbitrary Code Execution Vulnerability in Microsoft SharePoint

Microsoft Silverlight is a cross-browser, cross-platform plug-in that brings the next generation of .NETFramework-based media experiences and rich interactive applications to the Web. A security vulnerability exists in Microsoft SharePoint, where the program fails to properly validate special pag...

Unspecified Denial of Service Vulnerability in Cisco Wireless LAN Controller

The Cisco Wireless LAN Controller is used to manage application devices for Cisco Aironet access points using the Lightweight Access Point Protocol LWAPP. Cisco Wireless LAN Controller handles certain values with a security vulnerability that allows an attacker to exploit the vulnerability by...

ClamAV yc.c yc_poly_emulator() file handling remote denial of service vulnerability

ClamAV is an anti-virus application. ClamAV yc.c ycpolyemulator handles special files has a security vulnerability that allows remote attackers to exploit to crash the application...

GLSA-201504-02 : sudo: Information disclosure

The remote host is affected by the vulnerability described in GLSA-201504-02 sudo: Information disclosure sudo does not handle the TZ environment variable properly. Impact : A local attacker may be able to read arbitrary files or information from device special files. Workaround : There is no kno...

sudo: Information disclosure

Background sudo allows a system administrator to give users the ability to run commands as other users. Access to commands may also be granted on a range to hosts. Description sudo does not handle the TZ environment variable properly. Impact A local attacker may be able to read arbitrary files or...

USN-2558-1: Mailman vulnerability

It was discovered that Mailman incorrectly handled special characters in list names. A local attacker could use this issue to perform a path traversal attack and execute arbitrary code as the Mailman user...

McAfee Data Loss Prevention Endpoint EPO Extended Information Disclosure Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A security vulnerability in the McAfee Data Loss Prevention Endpoint DLPe epo extension allows remote attackers to submit a special URL request to obtain sensitive...

SQL Injection Vulnerability in Special Equipment Safety Monitoring System of Fuzhou Development Zone Chuangda Electronics Co.

Fuzhou Development Zone Chuangda Electronics Co., Ltd. special equipment safety monitoring system is a set of safety monitoring system for regulating elevators and other special equipment. Fuzhou Development Zone, Chuangda Electronics Co., Ltd. special equipment safety monitoring system there are...

SQL Injection Vulnerability in the Dynamic Supervision System of Special Equipment Safety Supervision of Fuzhou Development Zone Chuangda Electronics Co.

Fuzhou Development Zone Chuangda Electronics Co., Ltd. special equipment safety monitoring dynamic supervision system is a set of safety monitoring system used to regulate elevators and other special equipment. Fuzhou Development Zone, Chuangda Electronics Co., Ltd. special equipment safety...

EFF, ACLU, Other NGOs Urging U.N. to Create Privacy Watchdog

A coalition of 63 non-governmental organizations NGOs from around the world are calling on national governments to support the establishment of a special rapporteur on the right to privacy within the United Nations. According to U.N. documents, special rapporteurs also known as special procedures...

CSI: Cyber: We Watched So You Didn't Have To

From the time the first commercials aired during the American pro football championship game last month, CSI: Cyber has been one of the more talked-about and least-anticipated shows in recent memory. At least in tech circles. For normal viewers, it’s one of those shows that you wake up in the...

UnAce buffer overflow vulnerability

UnAce is a decompression application. A security vulnerability exists in UnAce's handling of special files, allowing an attacker to exploit the vulnerability to crash the application...

Vimeo: Vimeo Search - XSS Vulnerability [http://vimeo.com/search]

I found a XSS vulnerability in Vimeo Search. Keeping it short so that it does not go duplicate. Payload: "onmouseover=alert1 Live Demo: http://vimeo.com/search?q=%22onmouseover%3Dalert%281%29%3E Search @ http://vimeo.com/search with above payload. The culprit here is the Couch Mode feature. After...

WebGUI 7.10.29 Cross Site Scripting

Exploit Title: WebGUI 7.10.29 stable version Cross site scripting vulnerability Software Link: http://www.webgui.org/download Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 17-1-2015 Version: 7.10.29. Previous version maybe vulnerable also. Vulnerable area:...