1694 matches found
Linux Kernel Integer Overflow Vulnerability (CNVD-2017-01299)
The Linux Kernel is the kernel of the Linux operating system. A security vulnerability exists in the drivers/gpu/drm/vc4/vc4gem.c/vc4getbcl function in the VideoCore DRM driver in versions of Linux kernel prior to 4.9.7. A local user can cause a denial of service by calling the internally...
DEBIAN-CVE-2017-5576
Integer overflow in the vc4getbcl function in drivers/gpu/drm/vc4/vc4gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4SUBMITCL ioctl call...
DEBIAN-CVE-2017-5577
The vc4getbcl function in drivers/gpu/drm/vc4/vc4gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service incorrect pointer dereference and OOPS via inconsistent size valu...
UBUNTU-CVE-2017-5577
The vc4getbcl function in drivers/gpu/drm/vc4/vc4gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service incorrect pointer dereference and OOPS via inconsistent size valu...
HelpDeskZ < 1.0.2 - (Authenticated) SQL Injection / Unauthorized File Download
''' Exploit Title: HelpDeskZ fetchRow"SELECT , COUNTid AS total FROM ".TABLEPREFIX."attachments WHERE id=".$db-realescapestring$params2." AND ticketid=".$params0." AND msgid=".$params3; third argument AND msgid=".$params3; sent to fetchRow query with out any senitization Steps to reproduce:...
PT-2017-2021 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.7 Description: The issue is caused by an integer overflow in the vc4 get bcl function of the VideoCore DRM driver. This can be exploited by a local attacker using a specially crafted VC4 SUBMIT CL ioctl call...
Malware exploit: Filestealer 1.3
FileStealer v1.3 Type: Upload vulnerability Author: Xylitol !-- FileStealer v1.3 panel upload vulnerability -- !-- Panel hash: be19e93878130b2f57d42d4dcf5ffcf0 -- form method="POST" action="http://localhost/panel/up.php" enctype="multipart/form-data" File: input type="file" name="file" / br / HWI...
ManageEngine ServiceDesk Plus 9.2 Build 9207 Information Disclosure Vulnerability
Exploit for jsp platform in category web applications Title: ManageEngine ServiceDesk Plus Low Privileged User View All Tickets Date: 18 October 2016 Author: p0z Vendor: ManageEngine Vendor Homepage: https://www.manageengine.com/ Product: ServiceDesk Plus Version: 9.2 Build 9207 Other versions...
Legal Robot: UI Redressing ( ClickJacking ) Issue on Information submit form
I found that There is a Form for Submitting User Information for applying for Beta Program. But this has NO Protection against Clickjacking Issue & also this form needs the following inputs that can b somewhat useful for an attacker. Information Like: Name: Email: Company Following is HTML code i...
Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities
Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities Micro Focus Rumba+ v9.4 Multiple Stack Buffer Overflow Vulnerabilities Vendor: Micro Focus Product web page: https://www.microfocus.com Affected version: 9.4.4058.0 and 9.4.0 SP0 Patch0 Affected products/tools : Rumba Desktop...
Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities
Micro Focus Rumba+ v9.4 Multiple Stack Buffer Overflow Vulnerabilities Vendor: Micro Focus Product web page: https://www.microfocus.com Affected version: 9.4.4058.0 and 9.4.0 SP0 Patch0 Affected products/tools : Rumba Desktop 9.4 Rumba 9.4 Trace Rumba 9.4 APPC Configuration Rumba 9.4 AS400...
Drupal Core Forms Interface Ignores Submit Button Access Restriction Vulnerability
Drupal is a free and open source content management system developed in PHP. An access bypass vulnerability exists in Drupal Core. Allowing input submission, e.g. using JavaScript, of form button elements that the user should not have access to because the buttons are blocked by server-side form...
UBUNTU-CVE-2015-5264
The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access restrictions and enter additional answer attempts by leveraging the student role...
Form API ignores access restrictions on submit buttons
More info at https://www.drupal.org/SA-CORE-2016-001...
Form API ignores access restrictions on submit buttons
More info at https://www.drupal.org/SA-CORE-2016-001...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Interaction Center Intelligence Business Intelligence Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability in the Oracle E-Business Suite Oracle Interaction Center Intelligence Business Intelligence component allows remote attackers to exploit the vulnerability to submit a special request...
PT-2017-3606
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 4.14.8 Linux Kernel versions prior to 4.9.71 Linux Kernel versions prior to 4.4.114 Description: The issue is related to the stub recv cmd submit function in the Linux Kernel, which can be exploited by attackers...
PT-2015-7366
Name of the Vulnerable Software and Affected Versions Invision Power Services IPS Community Suite versions 4.0.0 through 4.0.12 Description A cross-site scripting issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved via the event locationaddre...
CVE-2015-6810: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Invision Power Services IPS Community Suite aka Invision Power Board, IPB, or Power Board 4.x before 4.0.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the eventlocationaddress array parameter to calendar/submit/...
Websense Content Gateway Stack Buffer Overflow Vulnerability
Websense Content Gateway is a set of content security solution gateway from Websense, Inc. A stack buffer overflow vulnerability exists in the 'handledebugnetwork' function in Manager for Websense Content Gateway version 8.0.0. A remote attacker can exploit this vulnerability to cause a denial of...