Yakir Sitbon, Ariel Klikstein Security Vulnerabilities

Unbreakable Enterprise kernel security update

kernel-uek [4.1.12-61.1.6] - blk-mq: avoid setting hctx->tags->cpumask before allocation (Akinobu Mita) [Orabug: 24464170] [4.1.12-61.1.3] - ocfs2: improve recovery performance (Junxiao Bi) [Orabug: 24395729] - qed: Utilize FW 8.10.3.0 (Yuval Mintz) [Orabug: 24442553] - blk-mq: mark request.....

MailEnable Buffer Overflow Vulnerability

Advisory ID: CORE-2005-0629 Bugtraq ID: 14243 CVE Name: CVE-2005-2278 Title: MailEnable Buffer Overflow Vulnerability Class: Boundary Error Condition (Stack Buffer Overflow) Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - MailEnable 2005-06-30: Notification to vendor....

Liferay Portal 6.2 EE SP8 Cross Site Scripting Vulnerability

Liferay Portal versions 6.2 EE SP8 and below suffer from a cross site scripting...

Zend-Framework - Full Info Disclosure

No description provided by...

PHP Event Calendar SQL Injection

...

Wordpress Frontend Upload插件任意文件上传漏洞

No description provided by...

Wordpress Frontend Upload Plugin - Arbitrary File Upload Vulnerability

Exploit for php platform in category web...

WordPress Plugin Frontend Upload - Arbitrary File Upload

WordPress Plugin Frontend Upload - Arbitrary File...

WordPress Plugin Frontend Upload - Arbitrary File Upload

...

XtremeRAT Malware Used in Targeted Attacks Against Israel

Espionage malware used in attacks against Israel, as well as Syrian activists, in the last 18 months has been linked to a new attack against Israel’s Civil Administration, the country’s governing body in the West Bank. Researchers at Seculert reported today that samples of XtremeRAT, a...

Israeli Defense computer hacked in Spear Phishing Attack

Hackers broke into an Israeli defense ministry computer via an email attachment tainted with malicious software. Reuters reported Israeli Defense is the latest illustrious victim of the Spear Phishing Attack, and hackers penetrated into an Israeli defense ministry computer using a malicious email.....

iOS Mobile Banking Applications Vulnerable to Attack

An alarming percentage of mobile banking applications for iOS fail to implement basic protections that would safeguard against man-in-the-middle attacks, session hijacking, memory corruption, and credential theft. Ariel Sanchez, a researcher with IOActive based in Argentina, put 40 mobile apps...

Zend-Framework - Full Info Disclosure Vulnerability

Exploit for php platform in category web...

Zend-Framework - Full Information Disclosure

Zend-Framework - Full Information...

Zend-Framework - Full Information Disclosure

...

Open Shortest Path First (OSPF) Protocol does not specify unique LSA lookup identifiers

Overview The Open Shortest Path First (OSPF) protocol does not specify unique Link State Advertisement (LSA) lookup identifiers, which allow an attacker to intercept traffic or conduct a Denial of Service (DoS) attack. Description CWE-694: Use of Multiple Resources with a Duplicate Identifier The.....

Android Debug Bridge Traversal

...

Buffer Overflow Bugs Found in Informix database Servers

Several versions of the popular Informix database server from IBM contain two buffer overflow vulnerabilities that could lead to remote code execution. The problems affect eight different versions of the server and are present on Informix installations on all supported platforms. A researcher at...

CVE-2012-1659

Cross-site scripting (XSS) vulnerability in the Node Recommendation module 6.x-1.x before 6.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified...

Unbreakable Enterprise kernel security and bugfix update

[2.6.39-200.24.1.el5uek] - Revert 'Add Oracle VM guest messaging driver' (Guru Anbalagane) [Orabug: 14233627} [2.6.39-200.23.1.el5uek] - SPEC: add block/net modules to list used by installer (Guru Anbalagane) [Orabug: 14224837] [2.6.39-200.22.1.el5uek] - NFSv4: include bitmap in nfsv4 get acl...

SA-CONTRIB-2012-034 - Node Recommendation Cross Site Scripting (XSS)

CVE: CVE-2012-1659 This module shows users other nodes that they might be interested in based on a simple logic and using taxonomy. The aim of this module is to provide sensible defaults and an easy configuration for less-technical users and to allow it to be manually overriden. The module doesn't....

Mac OS X Sandbox Security Hole Uncovered

Researchers at Core Security Technologies have uncovered a security hole that could allow someone to circumvent the application sandbox restrictions of Mac OS X. The report of the vulnerability, which affects Mac OS X 10.7x, 10.6x and 10.5x, follows Apple’s announcement earlier this month that all....

CVE-2009-3442

The Meta tags (aka Nodewords) module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified...

CORE-2008-1009 - VNC Multiple Integer Overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ VNC Multiple Integer Overflows Advisory Information Title: VNC Multiple Integer Overflows Advisory ID: CORE-2008-1009 Advisory URL:...

VNC Multiple Integer Overflows

VNC Multiple Integer Overflows 1. Advisory Information Title: VNC Multiple Integer Overflows Advisory ID: CORE-2008-1009 Advisory URL: http://www.coresecurity.com/content/vnc-integer-overflows Date published: 2009-02-03 Date of last update: 2009-02-03 Vendors contacted: UltraVNC, TightVNC Release.....

Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Buffer overrun in XMLQUERY and XMLEXISTS September 15th 2008 Risk Level: High Affected versions: IBM DB2 Database Server v9.1 and 9.5 on Windows platform. Remote exploitable: Yes (Authentication to Database Server is...

GLSA-200804-27 : SILC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-27 (SILC: Multiple vulnerabilities) Nathan G. Grennan reported a boundary error in SILC Toolkit within the silc_fingerprint() function in the file lib/silcutil/silcutil.c when passing overly long data, resulting in...

SILC: Multiple vulnerabilities

Background SILC (Secure Internet Live Conferencing protocol) Toolkit is a software development kit for use in clients, SILC Server is a communication server, and SILC Client is an IRSSI-based text client. Description Nathan G. Grennan reported a boundary error in SILC Toolkit within the...

Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Multiple DoS in JAR files manipulation procedures April 17th 2008 Risk Level: High Affected versions: All versions of IBM DB2 Database Server on Windows platform. Remote exploitable: Yes (Authentication to Database Server....

CORE-2007-1212: SILC pkcs_decode buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ SILC pkcs_decode buffer overflow Advisory Information Title: SILC pkcs_decode buffer overflow Advisory ID: CORE-2007-1212 Advisory URL:...

SILC pkcs_decode buffer overflow

SILC pkcs_decode buffer overflow Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs-research Advisory Information Title: SILC pkcs_decode buffer overflow Advisory ID: CORE-2007-1212 Advisory URL: http://www.coresecurity.com/?action=item&id=2206 Date published:...

Debian Security Advisory DSA 858-1 (xloadimage)

The remote host is missing an update to xloadimage announced via advisory DSA 858-1. Ariel Berkman discovered several buffer overflows in xloadimage, a graphics file viewer for X11, that can be exploited via large image titles and cause the execution of arbitrary code. For the old stable...

Debian Security Advisory DSA 859-1 (xli)

The remote host is missing an update to xli announced via advisory DSA 859-1. Ariel Berkman discovered several buffer overflows in xloadimage, which are also present in xli, a command line utility for viewing images in X11, and could be exploited via large image titles and cause the execution of...

Oracle Database Server 9i/10g (XML) Buffer Overflow Exploit

No description provided by...

Team SHATTER Advisory: IBM DB2 Buffer overflow in sysproc.auth_list_groups_for_authid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory IBM DB2 Buffer overflow in sysproc.auth_list_groups_for_authid August 31st 2007 Risk Level: High Affected versions: DB2 9.1 Fixpack 2 Enterprise server edition Remote exploitable: Yes Credits: This vulnerability....

JVN#84746611 Ariel AirOne series cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. ## Solution ## Products Affected Ariel AirOne ProjectA v4.6.1 Ariel MultiScheduler v4.6.3 For more information, refer to the vendor's...

Ariel FTP Server Default 'document' Account

The remote host is an Ariel FTP server. Ariel is a document transmission system mostly used in the academic world. Nessus was able to log into the remote FTP server by connecting as the user 'document' (or 'ariel4') and with a hex-encoded password based on the IP address of the host the user is...

FreeBSD : xloadimage -- buffer overflows in NIFF image title handling (2f0cb4bb-416d-11da-99fe-000854d03344)

Ariel Berkman reports : Unlike most of the supported image formats in xloadimage, the NIFF image format can store a title name of arbitrary length as part of the image file. When xloadimage is processing a loaded image, it is creating a new Image object and then writing the processed image to it......

GLSA-200510-26 : XLI, Xloadimage: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200510-26 (XLI, Xloadimage: Buffer overflow) When XLI or Xloadimage process an image, they create a new image object to contain the new image, copying the title from the old image to the newly created image. Ariel Berkman...

OraGENERATESCHEMAExploits.txt

...

Oracle Database Server 9i10g - XML Local Buffer Overflow

Oracle Database Server 9i10g - XML Local Buffer...

Oracle Database Server 9i/10g (XML) Buffer Overflow Exploit

Exploit for unknown platform in category local...

Oracle Database Server 9i/10g - 'XML' Local Buffer Overflow

...

Mandrake Linux Security Advisory : xli (MDKSA-2005:192)

Ariel Berkman discovered several buffer overflows in xloadimage, which are also present in xli, a command line utility for viewing images in X11, and could be exploited via large image titles and cause the execution of arbitrary code. The updated packages have been patched to address this...

Ubuntu 4.10 : cupsys vulnerabilities (USN-50-1)

CAN-2004-1125 : The recent USN-48-1 fixed a buffer overflow in xpdf. Since CUPS contains xpdf code to convert incoming PDF files to the PostScript format, this vulnerability applies to cups as well. In this case it could even lead to privilege escalation: if an attacker submitted a malicious PDF...

Moodle post.php XSS

The version of Moodle on the remote host contains a flaw that allows a remote cross site scripting attack because the application does not validate the 'reply' variable upon submission to the 'post.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary.....

XLI, Xloadimage: Buffer overflow

Background XLI and Xloadimage are X11 image manipulation utilities. Description When XLI or Xloadimage process an image, they create a new image object to contain the new image, copying the title from the old image to the newly created image. Ariel Berkman reported that the 'zoom', 'reduce', and...

Debian DSA-859-1 : xli - buffer overflows

Ariel Berkman discovered several buffer overflows in xloadimage, which are also present in xli, a command line utility for viewing images in X11, and could be exploited via large image titles and cause the execution of arbitrary...

Debian DSA-858-1 : xloadimage - buffer overflows

Ariel Berkman discovered several buffer overflows in xloadimage, a graphics file viewer for X11, that can be exploited via large image titles and cause the execution of arbitrary...

[SECURITY] [DSA 859-1] New xli packages fix arbitrary code execution

Debian Security Advisory DSA 859-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq Package : xli Vulnerability : buffer overflows Problem type :...