WebKit JSC suffers from a heap buffer overflow vulnerability in Intl.getCanonicalLocales.
3ce6984b8d5f3496724b9fd295322f1da9540728a002a8b0b7dee8bd77113aedWebKit JSC arrayProtoFuncSplice fails to initialize all indices.
13dd72fa2af4303dbad93e7d94dcc56e573f5e78bf2f2a216b2508deb6db452eWebKit JSC suffers from a JSGlobalObject::haveABadTime type confusion vulnerability.
1f481998f2bb5916dc1ba80de838274187ae1882f6a50f6e4569df9b5d0d75baMobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tools.
1bb65be90903eee45e15d24af2b6c0dd010d78e1b445c853660193498c6eb8f8WebKit JSC suffers from a JIT optimization check failure in IntegerCheckCombiningPhase::handleBlock.
5f12e99ad1584896ed16974eedb9cb9acb232c0a88d9e26de9c971d18be09ec8Ubuntu Security Notice 3319-1 - It was discovered that libmwaw incorrectly handled certain malformed document files. If a user or automated system were tricked into opening a specially crafted file, a remote attacker could cause libmwaw to crash, resulting in a denial of service, or possibly execute arbitrary code.
02410207f1a1c046286ef45d4b382f157915ada9811a82e495016ae2ec9a86d7Ubuntu Security Notice 3320-1 - Agostino Sarubbo discovered that zziplib incorrectly handled certain malformed ZIP files. If a user or automated system were tricked into opening a specially crafted ZIP file, a remote attacker could cause zziplib to crash, resulting in a denial of service, or possibly execute arbitrary code.
0facb5b0b37d2060820bd2dd400ee2ce1e945252c53024bc8d841bf4a0392911Aerohive AP340 HiveOS versions prior to 6.1r5 suffers from a local file inclusion vulnerability that allows for remote code execution.
5096df9922bc9ca5a7abe4965612168edede6678940eed12f33f417ba8ae74f1SAP Successfactors release build b1702p5e.1190658 suffers from a stored cross site scripting vulnerability.
bfe454a46eb43bfcc1ec32a0016911e6ecb628b8d74b6e404a65df2517180493VX Search Enterprise version 9.7.18 suffers from a local buffer overflow vulnerability.
b867d95693b7b4c15e56482bd672165bbc3e486d1c5cd43eade554b80421cadbSlackware Security Advisory - New mozilla-firefox packages are available for Slackware 14.2, and -current to fix security issues.
45fed13c05ed406363d2af40adf7095d00647f02104c2a7a235ccb29e1600e51Slackware Security Advisory - New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.
8da7176bf51d0dff5e6b0e79a09fb8bc14b0e710c4ae7c0db0fa02db2ee085baDebian Linux Security Advisory 3881-1 - Several security issues have been found in the Mozilla Firefox web and other implementation errors may lead to the execution of arbitrary code, denial of service or domain spoofing.
112422a70957456e9a0f819bd20d78994f90e7c026cb6c4655c32d62302d5b07Ubuntu Security Notice 3315-1 - Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, read uninitialized memory, obtain sensitive information, spoof the addressbar contents, or execute arbitrary code. Multiple security issues were discovered in the Graphite 2 library used by Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, read uninitialized memory, or execute arbitrary code. Various other issues were also addressed.
7eb0864d83a8a74066d8c82ffa503c1e09d4fbdfca74fda567aa1c836240f8c7WordPress WP Job Manager plugin version 1.26.1 suffers from a stored cross site scripting vulnerability.
ef663e26c69c86bb3454764a5630ef76e906e738a5c2b78dc4d41ff79918ffc024 bytes small Linux/x86_64 execve("/bin/sh") shellcode.
296b8bc622979aa8bff935eebea82ba9a1c1f5380f786784d16a232e0953cbb066 bytes small Linux/x86 XOR encoded execve(/bin/sh) setuid(0) setgid(0) shellcode.
c56231d79b9d97ed7017f11b49238c722fe202fcfe76595a21905b422970b56fThis is a brief whitepaper written in Arabic that gives some examples of tools that can be used to hack systems.
2ae93e8c7e8325d75e32afcbb5a09b54616818e152807f8540adb0a73c0988b2EMC ESRS Virtual Edition versions 3.18 and below suffer from an authentication bypass vulnerability.
8666f37e3ef15763b1db09beb9436af8ea5cbb6b178917f128c667f80b86d103RSA BSAFE Cert-C is affected by a potential improper certificate processing vulnerability. The vulnerability is caused by a faulty certificate processing logic that may potentially cause a crash in RSA BSAFE Cert-C. Versions prior to 2.9.0.5 are affected.
b29dfdcec97853d8c34a107eb1d7942b91cca0ad9e7bb8bbc5f7cd1b1a50b605SimpleCE version 2.3.0 suffers from cross site request forgery and cross site scripting vulnerabilities.
73f4dbf9aae73e9ed6bd6b715bc4d53973e9ebf611084b48d09ebacdb37362f4
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed