9565 matches found
DEBIAN-CVE-2016-1546
The Apache HTTP Server 2.4.17 and 2.4.18, when modhttp2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service stream-processing outage via modified flow-control windows...
CVE-2016-1546
The Apache HTTP Server 2.4.17 and 2.4.18, when modhttp2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service stream-processing outage via modified flow-control windows...
Vulnerability of PHP software, allowing a malicious actor to compromise the accessibility of protected information
A vulnerability exists in the cdfcheckstreamoffset function in the cdf.c file of the Fileinfo component in PHP, due to the use of incorrect sector size data. Exploiting this vulnerability allows malicious actors to cause a service failure abnormal termination of the application by utilizing a...
The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.
Google Chrome browser contains a vulnerability related to integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/rendererhost/media/audioinputrendererhost.cc. Exploiting this vulnerability allows malicious actors to cause service failures or other effects on th...
The vulnerability of the Linter Bastion database management system allows a malicious individual to trigger a service failure.
When processing an incorrect, improperly formed SQL query of the SELECT type a low-level command “”, one of the streams of the Inter Bastion Database Management System enters an infinite loop, thereby exhausting all resources in the stream. As a result, the Inter Bastion Database Management Syste...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure
Absent users may cause service failure dereferencing of NULL pointers when using the SCTP network protocol...
Symantec PowerPoint Misaligned Stream Remote Stack Buffer Overflow (CVE-2016-2209)
Multiple vulnerabilities exist in the Decomposer component of Symantec Antivirus Engine. These vulnerabilities are due to incorrect and missing bounds checks. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a maliciously crafted file to a user running this engine...
Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow
Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=823 A PowerPoint PPT file is a complicated OLE compound document comprising of a series of streams. The format is described by Microsoft in MS-PPT...
Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow (PoC)
Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow PoC Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=823 A PowerPoint PPT file is a complicated OLE compound document comprising of a series of streams. The format is described by Microsoft in...
Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow (PoC)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=823 A PowerPoint PPT file is a complicated OLE compound document comprising of a series of streams. The format is described by Microsoft in MS-PPT. https://msdn.microsoft.com/en-us/library/office/cc313106v=office.12.aspx Symantec...
kernel: SCTP denial of service during timeout
A race condition flaw was found in the way the Linux kernel's SCTP implementation handled sctpaccept during the processing of heartbeat timeout events. A remote attacker could use this flaw to prevent further connections to be accepted by the SCTP server running on the system, resulting in a deni...
openSUSE Security Update : vlc (openSUSE-2016-755)
This update for vlc to version 2.1.6 fixes the following issues : These CVE were fixed : - CVE-2016-5108: Reject invalid QuickTime IMA files boo984382. - CVE-2016-3941: Heap overflow in processing wav files boo973354. These security issues without were fixed : - Fix heap overflow in decomp stream...
[SECURITY] Fedora 24 Update: expat-2.1.1-2.fc24
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
Capture Windows Kernel Activity: Fibratus
Capture Windows Kernel Activity: Fibratus Tool for exploration and tracing of the Windows kernel Fibratus is a tool which is able to capture the most of the Windows kernel activity – process/thread creation and termination, file system I/O, registry, network activity, DLL loading/unloading and mu...
IBM Storwize SSL/TLS RC4 Stream Cipher Key Invariance (Bar Mitzvah)
According to its self-reported version number, the IBM Storwize server running on the remote host is affected by a security feature bypass vulnerability, known as Bar Mitzvah, due to improper combination of state data with key data by the RC4 cipher algorithm during the initialization phase. A...
WordPress Social Stream 1.5.15 wp_options Overwrite
Vendor Homepage: Software Link: http://codecanyon.net/item/wordpress-social-stream/2201708?srank=15 Version: 1.5.15 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated wpoptions overwrite Time line: Found 14-May-2016, Vendor notified 14-May-2016, Vendor fixed: v1.5.16 19/05/2016 Current Version...
WordPress Plugin Social Stream 1.5.15 - wp_options Overwrite
Vendor Homepage: Software Link: http://codecanyon.net/item/wordpress-social-stream/2201708?srank=15 Version: 1.5.15 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated wpoptions overwrite Time line: Found 14-May-2016, Vendor notified 14-May-2016, Vendor fixed: v1.5.16 19/05/2016 Current Version...
WordPress Social Stream 1.5.15 Plugin - wp_options Overwrite
Exploit for php platform in category web applications Vendor Homepage: Software Link: http://codecanyon.net/item/wordpress-social-stream/2201708?srank=15 Version: 1.5.15 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated wpoptions overwrite Time line: Found 14-May-2016, Vendor notified...
WordPress Plugin Social Stream 1.5.15 - wp_options Overwrite
WordPress Plugin Social Stream 1.5.15 - wpoptions Overwrite Vendor Homepage: Software Link: http://codecanyon.net/item/wordpress-social-stream/2201708?srank=15 Version: 1.5.15 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated wpoptions overwrite Time line: Found 14-May-2016, Vendor notified...
