4881 matches found
Users Report Malicious Ads in Skype
Some Skype users have reported seeing malicious ads inside their Skype clients in recent days that lead to a site that tries to download a fake Adobe or Java update. Users in the Skype community forum on Monday said that they have been seeing a banner ad that, if clicked on, will lead to a dodgy...
openSUSE Security Update : Linux Kernel (openSUSE-SU-2014:1678-1)
The openSUSE 13.2 kernel was updated to version 3.16.7. These security issues were fixed : - CVE-2014-9322: A local privilege escalation in the x8664 32bit compatibility signal handling was fixed, which could be used by local attackers to crash the machine or execute code. bnc910251 -...
Enter: Error stack trace
Make request removed csrf token in POST data POST /settings HTTP/1.1 Host: wallet.robocoin.com User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9; rv:34.0 Gecko/20100101 Firefox/34.0 Accept: / Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate Content-Type:...
Design/Logic Flaw
Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace, as demonstrated by internal URL information, aka ZEN-15382...
PT-2014-8899
Name of the Vulnerable Software and Affected Versions Zenoss Core versions through 5 Beta 3 Description The issue allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace. This can potentially reveal...
CVE-2014-9245: Exposure of Sensitive Information to an Unauthorized Actor
Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace, as demonstrated by internal URL information, aka ZEN-15382...
Mandriva Linux Security Advisory : kernel (MDVSA-2014:230)
Multiple vulnerabilities has been found and corrected in the Linux kernel : The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause...
PT-2014-8754
Name of the Vulnerable Software and Affected Versions iMember360 plugin versions 3.8.012 through 3.9.001 for WordPress Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests with an unspecified impact via the i4w tra...
PT-2014-8755
Name of the Vulnerable Software and Affected Versions iMember360 plugin versions 3.8.012 through 3.9.001 Description The issue allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the i4w trace parameter. This can potentially be leveraged to allow...
SAP Netweaver Enqueue Server - Denial of Service
No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID:...
CVE-2 0 1 4-1 7 7 2 – Internet Explorer Use After Free vulnerability detailed analysis-vulnerability warning-the black bar safety net
http://blog.trendmicro.com/trendlabs-security-intelligence/root-cause-analysis-of-cve-2014-1772-an-internet-explorer-use-after-free-vulnerability/ Translated from TrendLabs ! /Article/UploadPic/2014-11/2014111310206615.jpg We often see a wide variety of vulnerabilities, from the user-after-free...
CVE-2014-7826
kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service invalid pointer dereference via a crafted application...
CVE-2014-7826
kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service invalid pointer dereference via a crafted application...
CVE-2014-7825
kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of service out-of-bounds read and OOPS or bypass the ASLR protection mechanism via a crafted application...
CVE-2014-7826: NULL Pointer Dereference
kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service invalid pointer dereference via a crafted application...
PT-2014-4008
Name of the Vulnerable Software and Affected Versions SAP Netweaver versions 7.20, 7.01, and earlier Description The issue allows remote attackers to cause a denial of service, resulting in uncontrolled recursion and crash, by utilizing a trace level with a wildcard in the Trace Pattern...
CVE-2014-0995: Improper Input Validation
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...
CNIL CookieViz Cross Site Scripting / SQL Injection
CNIL CookieViz XSS + SQL injection leading to user pwnage Product link: https://github.com/LaboCNIL/CookieViz CVE references CVE-2014-8351, CVE-2014-8352 TL;DR ----- Since October 2014, the French National Commission on Informatics and Liberty "CNIL" is performing some controls upon "tracing...