Prey Anti-theft missing SSL certificate check

No description provided...

Advantech EKI-6340 code execution

Shell commands injection in Web interface...

[KIS-2014-13] Tuleap <= 7.6-4 (register.php) PHP Object Injection Vulnerability

----------------------------------------------------------------- Tuleap = 7.6-4 register.php PHP Object Injection Vulnerability ----------------------------------------------------------------- - Software Links: https://www.tuleap.org/ https://www.enalean.com/ - Affected Versions: Version 7.6-4...

[security bulletin] HPSBMU03190 rev.1 - HP Helion Cloud Development Platform Community and Commercial Editions, Remote Unauthenticated Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04500238 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04500238 Version: 1 HPSBMU03190 rev....

Slider Revolution/Showbiz Pro shell upload exploit

!/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published: 25 November 2014 MorXploit Research http://www.MorXploit.com Vendor: ThemePunch...

[ MDVSA-2014:234 ] libksba

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:234 http://www.mandriva.com/en/support/security/ Package : libksba Date : November 28, 2014 Affected: Business Server 1.0 Problem Description: Updated libksba packages fix security vulnerability: By using...

libksba buffer overflow

Buffer overflow on S/MIME messages parsing...

[USN-2422-1] Squid vulnerabilities

========================================================================== Ubuntu Security Notice USN-2422-1 November 25, 2014 squid3 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

icecast information disclosure

Server leaks scripts sources...

squid security vulnerabilities

DoS and information disclosure in pinger service...

[USN-2425-1] DBus vulnerability

========================================================================== Ubuntu Security Notice USN-2425-1 November 27, 2014 dbus vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[ MDVSA-2014:226 ] imagemagick

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:226 http://www.mandriva.com/en/support/security/ Package : imagemagick Date : November 25, 2014 Affected: Business Server 1.0 Problem Description: Updated imagemagick packages fix security vulnerabilities:...

imagemagic DoS

Out-of-buffer reads...

[USN-2426-1] FLAC vulnerabilities

========================================================================== Ubuntu Security Notice USN-2426-1 November 27, 2014 flac vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[oCERT 2014-008] libFLAC multiple issues

Description: FLAC is an open source lossless audio codec supported by several software and music players. The libFLAC project, an open source library implementing reference encoders and decoders for native FLAC and Ogg FLAC audio content, suffers from multiple implementation issues. In particular...

flac memory corruptions

Buffer overflows on audio files parsing...

[USN-2423-1] ClamAV vulnerabilities

========================================================================== Ubuntu Security Notice USN-2423-1 November 26, 2014 clamav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[ MDVSA-2014:231 ] icecast

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:231 http://www.mandriva.com/en/support/security/ Package : icecast Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Updated icecast package fixes security vulnerability: Icecast di...

[ MDVSA-2014:230 ] kernel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:230 http://www.mandriva.com/en/support/security/ Package : kernel Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been found and corrected in the Linu...

ClamAV memory corruptions

Memory corruptions on JS and PE files parsing...

[ MDVSA-2014:232 ] glibc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:232 http://www.mandriva.com/en/support/security/ Package : glibc Date : November 27, 2014 Affected: Business Server 1.0 Problem Description: Updated glibc package fixes security vulnerability: The function...

GNU glibc code execution

wordexp function code execution...

Linux kernel multiple security vulnerabilities

Multiple KVM vulnerabilities, CIFS client DoS, remote DoS vulnerabilities, tracesyscalls privilege escalation and protection bypass...

dbus multiple security vulnerabilities

Memory corruptions, DoS...

GnuTLS memory corruption

Memory corruption on ECC...

AppArmor restrictions bypass

Restrictions bypass in apparmorparser...

Apple Mac OS X multiple security vulnerabilities

Information leakage, memory corruption...

[USN-2400-1] LibreOffice vulnerability

========================================================================== Ubuntu Security Notice USN-2400-1 November 10, 2014 libreoffice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

AST-2014-013: PJSIP ACLs are not loaded on startup

Asterisk Project Security Advisory - AST-2014-013 Product Asterisk Summary PJSIP ACLs are not loaded on startup Nature of Advisory Unauthorized Access Susceptibility Remote unauthenticated sessions Severity Moderate Exploits Known No Reported On 28 October, 2014 Reported By Jonathan Rose Posted O...

AST-2014-014: High call load may result in hung channels in ConfBridge.

Asterisk Project Security Advisory - AST-2014-014 Product Asterisk Summary High call load may result in hung channels in ConfBridge. Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions Severity Moderate Exploits Known No Reported On 19 October, 2014 Reported By Ben...

[ MDVSA-2014:224 ] krb5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:224 http://www.mandriva.com/en/support/security/ Package : krb5 Date : November 21, 2014 Affected: Business Server 1.0 Problem Description: Updated krb5 packages fix security vulnerability: The...

CVE-2014-8768 tcpdump denial of service in verbose mode using malformed Geonet payload

CVE-2014-8768 tcpdump denial of service in verbose mode using malformed Geonet payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is...

mountall privilege escalation

umask is handled incorrectly...

LibreOffice use-after-free vulnereability

Ingress remote control protocol use-after-free, memory corruption in OLE preview...

Asterisk multiple security vulnerabilities

Restrictions bypass, privilege escalation, DoS...

AST-2014-017: Permission escalation through ConfBridge actions/dialplan functions

Asterisk Project Security Advisory - AST-2014-017 Product Asterisk Summary Permission escalation through ConfBridge actions/dialplan functions Nature of Advisory Permission Escalation Susceptibility Remote Authenticated Sessions Severity Minor Exploits Known No Reported On November 4, 2014 Report...

[ MDVSA-2014:215 ] gnutls

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:215 http://www.mandriva.com/en/support/security/ Package : gnutls Date : November 19, 2014 Affected: Business Server 1.0 Problem Description: Updated gnutls package fix security vulnerability: An out-of-boun...

APPLE-SA-2014-11-17-3 Apple TV 7.0.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-3 Apple TV 7.0.2 Apple TV 7.0.2 is now available and addresses the following: Apple TV Available for: Apple TV 3rd generation and later Impact: An attacker with a privileged network position may cause an unexpected application...

libcurl information leakage

Memory content leakage via POST...

MIT krb5 privilege escalation

Under some conditions, kadm5randkeyprincipal3 returns old keys...

CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload

CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attache...

[USN-2412-1] Ruby vulnerability

========================================================================== Ubuntu Security Notice USN-2412-1 November 20, 2014 ruby1.8, ruby1.9.1, ruby2.0, ruby2.1 vulnerability ========================================================================== A security issue affects these releases of...

APPLE-SA-2014-11-17-1 iOS 8.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...

[USN-2404-1] libvirt vulnerabilities

========================================================================== Ubuntu Security Notice USN-2404-1 November 11, 2014 libvirt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...

[USN-2411-1] mountall vulnerability

========================================================================== Ubuntu Security Notice USN-2411-1 November 18, 2014 mountall vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Apple TV multiple security vulnerabilities

Memory corruptions, unsigned code execution, privilege escalation...

APPLE-SA-2014-11-17-2 OS X Yosemite 10.10.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-2 OS X Yosemite 10.10.1 OS X 10.10.1 is now available and addresses the following: CFNetwork Available for: OS X Yosemite v10.10 Impact: Website cache may not be fully cleared after leaving private browsing Description: A privacy...

Ruby DoS

Resources exhaustion on XML parsing. Memory corruption in encodes...

AST-2014-012: Mixed IP address families in access control lists may permit unwanted traffic.

Asterisk Project Security Advisory - AST-2014-012 Product Asterisk Summary Mixed IP address families in access control lists may permit unwanted traffic. Nature of Advisory Unauthorized Access Susceptibility Remote unauthenticated sessions Severity Moderate Exploits Known No Reported On 25 Octobe...

AST-2014-018: AMI permission escalation through DB dialplan function

Asterisk Project Security Advisory - AST-2014-018 Product Asterisk Summary AMI permission escalation through DB dialplan function Nature of Advisory Permission Escalation Susceptibility Remote Authenticated Sessions Severity Minor Exploits Known No Reported On November 17, 2014 Reported By Gareth...