UBUNTU-CVE-2015-8547

The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service application crash via the "/op " command in a query...

Local File Disclosure

SECURITY Fix CVE-2017-5223, local file disclosure vulnerability if content passed to msgHTML is sourced from unfiltered user input. Reported by Yongxiang Li of Asiasecurity. The fix for this means that calls to msgHTML without a $basedir will not import images with relative URLs, and relative...

Ruby on Rails: Validation bypass for Active Record and Active Model

Possible Input Validation Circumvention in Active Model There is a possible input validation circumvention vulnerability in Active Model. This vulnerability has been assigned the CVE identifier CVE-2016-0753. Versions Affected: 4.1.0 and newer Not affected: 4.0.13 and older Fixed Versions:...

colorscore Gem for Ruby lib/colorscore/histogram.rb Arbitrary Command Injection

The contents of the imagepath, colors, and depth variables generated from possibly user-supplied input are passed directly to the shell via convert .... If a user supplies a value that includes shell metacharacters such as ';', an attacker may be able to execute shell commands on the remote syste...

Gentoo Security Advisory GLSA 201512-12

Gentoo Linux Local Security Checks GLSA 201512-12 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

MPFR: User-assisted execution of arbitrary code

Background MPFR is a library for multiple-precision floating-point computations with exact rounding. Description MPFR fails to adequately check user-supplied input, which could lead to a buffer overflow. Impact A remote attacker could possibly execute arbitrary code with the privileges of the...

WordPress Multiple Vulnerabilities (Dec 2015) - Linux

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

Cisco Unified Email Interaction Manager and Cisco Unified Web Interaction Manager XSS Vulnerability

A vulnerability in the web interface of Cisco Unified Email Interaction Manager and Cisco Unified Web Interaction Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient...

Cisco DPC3939 (XB3) Router Administrative Web Interface Command Injection Vulnerability

A vulnerability in the administrative web interface of the Cisco DPC3939 XB3 router could allow an authenticated, remote attacker to execute arbitrary commands on the affected system and on the devices managed by the system. The vulnerability is due to improper user input validation. An attacker...

GoAutoDial CE 3.3 SQL Injection / Command Injection Exploit

GoAutoDial CE version 3.3 remote command execution and SQL injection vulnerabilities. Title : GoAutoDial CE 3.3 Multiple SQL injections, Command Injection Date : 06/12/2015 Author : R-73eN Tested on : goautodial-32bit-ce-3.3-final Software : http://goautodial.org/ | | / | / | / \ | | | || ' | | /...

Aethra SV2242E XXE Injection Vulnerability

Aethra SV2242E suffers from an XML external entity injection vulnerability. Author : Ahmed Sultan Email : email protected Vuln. software : Aethra SV2242E Vendor site : aethra.it CVE : Requested , but haven't been assigned yet tested on : ATOS 5.6.x The bug rise because of the remote user input to...

Aethra SV2242E XXE Injection

Author : Ahmed Sultan Email : [email protected] Vuln. software : Aethra SV2242E Vendor site : aethra.it CVE : Requested , but haven't been assigned yet tested on : ATOS 5.6.x The bug rise because of the remote user input to "/cgi-bin/AmiWeb" is not sensitized before being parsed which cause the...

[SECURITY] Fedora 23 Update: sundials-2.6.2-11.fc23

SUNDIALS is a SUite of Non-linear DIfferential/ALgebraic equation Solvers for use in writing mathematical software. SUNDIALS was implemented with the goal of providing robust time integrators and nonlinear solvers that can easily be incorporated into existing simulat ion codes. The primary design...

Cisco Firepower 9000 Command Injection at Management I/O Command-Line Interface Vulnerability

A vulnerability in the Management I/O MIO command-line interface CLI command execution of Cisco Firepower 9000 devices could allow an authenticated, local attacker to access the underlying operating system and execute commands at the root privilege level. The vulnerability is due to insufficient...

Apache Commons Collections Unserialize Java Vulnerability

For close to 10 months, a critical vulnerability in a library found in most Java rollouts has been twisting in the wind, unpatched, and until this week without proof-of-concept exploits that people paid attention to. Two researchers with NTT Com Security changed that dynamic last week when they...

Microsoft .NET Framework CVE-2015-6099 Cross Site Scripting Vulnerability

Description Microsoft .NET Framework is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This ma...

Regular Expression Denial of Service

Overview Versions of moment prior to 2.11.2 are affected by a regular expression denial of service vulnerability. The vulnerability is triggered when arbitrary user input is passed into moment.duration. Proof of concept var moment = require'moment'; var genstr = function len, chr var result = "";...

Command Injection

Overview Versions of gm prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into gm.compare, which fails to sanitize input correctly before calling the graphics magic binary. Recommendation Update to version 1.21.1 or later...

Regular Expression Denial of Service

Overview The jadedown package is affected by a regular expression denial of service vulnerability when certain types of user input are passed in. Proof of concept var jadedown = require'jadedown'; var genstr = function len, chr var result = ""; for i=0; i=len; i++ result = result + chr; return...

Regular Expression Denial of Service

Overview The ansi2html package is affected by a regular expression denial of service vulnerability when certain types of user input is passed in. Proof of concept var ansi2html = require'ansi2html' var start = process.hrtime; ansi2html"1111111111111111111111;0000000000000000000000";...