UBUNTU-CVE-2016-7910

Use-after-free vulnerability in the diskseqfstop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed...

Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines

An infinite loop flaw was found in the way QEMU's e1000 NIC emulation implementation processed data using transmit or receive descriptors under certain conditions. A privileged user inside a guest could use this flaw to crash the QEMU instance...

CVE-2016-7910

Use-after-free vulnerability in the diskseqfstop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed...

PDF Complete Office Edition 4.1.12 - Unquoted Service Path Privilege Escalation Exploit

Exploit Title : PDFcompletecorporateedition.rb - 'Unquoted Service Path Privilege Escalation' PDF Version : 4.1.12 vuln Discover : Joey Lane Module Author : pedr0 Ubuntu r00t-3xp10it Tested on : Windows 7 Professional Software Link : http://www.pdfcomplete.com/cms/Downloads.aspx "This was tested ...

NO-IP DUC v4.1.1 Unquoted Service Path Privilege Escalation Exploit

Exploit Title : NO-IPprivilegescalation.rb - 'Unquoted Service Path Privilege Escalation' PDF Version : 4.1.1 vuln Discover : Ehsan Hosseini Module Author : pedr0 Ubuntu r00t-3xp10it Tested on : Windows 7 Professional Software Link : http://www.noip.com/client/DUCSetupv411.exe DESCRIPTION NO-IP D...

October 27, 2016 — KB3197954 (OS Build 14393.351)

None None...

DWebPro 8.4.2 Local File Inclusion Vulnerability

DWebPro is a dynamic web site software package for distribution on CD/DVD or USB drives. A local file inclusion vulnerability exists in the start parameter of DWebPro, which allows an attacker to access arbitrary files and, when browsing to an executable file, execute the file with system...

September 13, 2016 — KB3185614 (OS Build 10586.589)

None None...

SUSE-SU-2016:2156-1 Security update for glibc

This update for glibc fixes the following issues: - Drop old fix that could break services that start before IPv6 is up. bsc931399 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Relocate DSOs in dependency order, fixing...

F5 Networks BIG-IP : TMM vulnerability (K19784568)

Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote attackers to cause a denial of service Traffic Management Microkernel restart via crafted network...

PT-2016-7823 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.7 Description: The issue is related to a race condition in the snd pcm period elapsed function in the ALSA subsystem. This can be exploited by local users to cause a denial of service use-after-free or possibl...

whalefootage.org XSS vulnerability

Vulnerable URL: http://www.whalefootage.org/start.php?lang=en";...

MasterCard Start Path Insights - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application MasterCard Start Path Insights published at the 'play' market has multiple vulnerabilities...

Kovter becomes almost file-less, creates a new file type, and gets some new certificates

Trojan:Win32/Kovter is a well-known click-fraud malware which is challenging to detect and remove because of its file-less persistence on infected PCs. In this blog, we will share some technical details about the latest changes we have seen in Kovter’s persistence method and some updates on their...

The vulnerability of the libxml2 library, which allows a hacker to trigger a service failure

The vulnerability of the xmlParseMisc function in the parser.c file of the libxml2 library arises due to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure by manipulating the boundaries of entities and start tags...

Android Qualcomm Component Security Bypass Vulnerability

Android on Nexus 5 is an open source Linux-based operating system for the Nexus 5 smartphone developed by Google and the Open Handset Alliance OHA.Qualcomm is one of the Qualcomm components used in the Qualcomm devices. Qualcomm is a Qualcomm component used in one of the Qualcomm devices. A...

MS16-088: Description of the security update for SharePoint Server 2016: July 12, 2016

None None...

[SECURITY] Fedora 22 Update: expat-2.1.1-2.fc22

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

UBUNTU-CVE-2014-9795

app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bu...

UBUNTU-CVE-2014-9780

drivers/video/msm/mdss/mdp3ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate start and length values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28602014 and Qualcomm internal bug...