432 matches found
UBUNTU-CVE-2017-17805
The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AFALG-based skcipher interface CONFIGCRYPTOUSERAPISKCIPHER to cause a denial of service uninitialized-memory free and kernel crash or have...
Linux kernel 'walk_hugetlb_range' function information disclosure vulnerability
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in the 'walkhugetlbrange' function in the mm/pagewalk.c file in versions of Linux kernel prior to 4.14.2. A local attack...
idb - Tool to simplify some common tasks for iOS pentesting and research
idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. Installation idb has some prerequisites. As it turns out, things like ruby and Qt are...
CVE-2017-1000367
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...
Weblate: DNSSEC Zone Walk using NSEC Records
Due to a design flaw in the NSEC records used by DNSSEC it is possible to discover all subdomains of a particular domain for which NSEC records are available. NSEC records are used by the weblate.org domain which means anyone can retreive all subdomains of weblate.org. These subdomains can contai...
Code injection
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...
walk-ins.info XSS vulnerability
Vulnerable URL: http://walk-ins.info/cityjobs.asp?findloc=Pune%22%3E%22%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Microsoft Edge - JSON.parse Info Leak Vulnerability
Exploit for windows platform in category dos / poc var once = false; var a = 1; function f if!once a = new Array1, 2, 3; this2 = a; once = true; //alert"f " + this; return ; JSON.parse"1, 2, 4, 5", f; var n = new Numbera0; n = n 1; var s = n.toString16; n = new Numbera1; n = n 1; s = s +...
PT-2016-3448 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue was found in the netlink dump function. This occurs when the Netlink socket receives a message of type XFRM MSG GETSA or XFRM MSG GETPOLICY with the DU...
FreeBSD : xen-kernel -- x86 software guest page walk PS bit handling flaw (e43b210a-4212-11e6-942d-bc5ff45d0f28)
The Xen Project reports : The Page Size PS page table entry bit exists at all page table levels other than L1. Its meaning is reserved in L4, and conditionally reserved in L3 and L2 depending on hardware capabilities. The software page table walker in the hypervisor, however, so far ignored that...
Solar Walk Free - Planets - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Solar Walk Free - Planets published at the 'play' market has multiple vulnerabilities...
Noom Walk Pedometer - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Noom Walk Pedometer published at the 'play' market has multiple vulnerabilities...
Walk Band - Multitracks Music - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Walk Band - Multitracks Music published at the 'play' market has multiple vulnerabilities...
VR Space Walk - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application VR Space Walk published at the 'play' market has multiple vulnerabilities...
Walk-A-Funghi - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Walk-A-Funghi published at the 'play' market has multiple vulnerabilities...
SuSE 11.3 Security Update : net-snmp (SAT Patch Number 9679)
This update for net-snmp fixes a remote denial of service problem inside snmptrapd when it is started with the '-OQ' option. CVE-2014-3565, bnc894361 Additionally, a timeout issue during SNMP MIB walk on OID 1.3.6.1.2.1.4.24 when using newer v5.5+ versions of snmpwalk has been fixed. bnc865222...
kernel security and bug fix update
2.6.32-431.29.2 - kernel futex: Fix errors in nested key ref-counting Denys Vlasenko 1094457 1094458 CVE-2014-0205 - net vxlan: fix NULL pointer dereference Jiri Benc 1114549 1096351 CVE-2014-3535 2.6.32-431.29.1 - mm hugetlb: ensure hugepage access is denied if hugepages are not supported Gustav...
CVE-2014-4573
Multiple cross-site scripting XSS vulnerabilities in frame-maker.php in the Walk Score plugin 0.5.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s or 2 o parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in frame-maker.php in the Walk Score plugin 0.5.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s or 2 o parameter...
CVE-2014-4573
Multiple cross-site scripting XSS vulnerabilities in frame-maker.php in the Walk Score plugin 0.5.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s or 2 o parameter...