Full Disclosure
Posted by 0xr0ot on Sep 08
Hi,
Description of the potential vulnerability:
SVE-2016-6248: SystemUI Security issue
Severity: Medium
Affected versions: L(5.0/5.1), M(6.0) devices with Exynos7420 chipset
Reported on: June 7, 2016
Disclosure status: Privately disclosed.
The vulnerability exists due to a null pointer dereference on fimg2d driver.
The patch verifies if the object is null before dereferencing it.
Fix:…
Posted by Dawid Golunski on Sep 08
Vulnerability: Adobe ColdFusion <= 11 XXE Injection
CVE: CVE-2016-4264
Vendor ID: APSB16-30
Discovered by: Dawid Golunski (http://legalhackers.com)
Adobe ColdFusion in versions 11 and below is vulnerable to XXE
Injection when processing untrusted office documents.
Depending on a web application’s functionality and the attacker’s ability to
supply a malicious document to be processed by a vulnerable ColdFusion
application, this…
Posted by redrain root on Sep 08
Airmail is a popular email client on iOS and OS X.
I found a vulnerability in airmail of the latest version which could cause
a file:// xss and arbitrary file read.
Author: redrain, yu.hong () chaitin com
Date: 2016-08-15
Version: 3.0.2 and earlier
Platform: OS X and iOS
Site: http://airmailapp.com/
Vendor: http://airmailapp.com/
Vendor Notified: 2016-08-15
Vulnerability:
There is a file:// xss in airmail version 3.0.2 and earlier.
The app can…
Posted by Stefan Kanthak on Sep 08
Hi @ll,
according to <https://msdn.microsoft.com/en-us/library/ms684179.aspx>
and <https://msdn.microsoft.com/en-us/library/ms682586.aspx>,
LoadLibraryEx with LOAD_WITH_ALTERED_SEARCH_PATH should NOT search
the calling program’s application directory:
| Note that the standard search strategy and the alternate search
| strategy specified by LoadLibraryEx with LOAD_WITH_ALTERED_SEARCH_PATH
| differ in just one way: The standard…
Posted by bashis on Sep 08
/*
Author: bashis <mcw noemail eu>, 2016
Small example code of ‘two-write-where-and-what’ format string (FMS) and description how to possible exploit when
located on heap.
Since the technique is ‘two-write-where-and-what’, it’s possible to jump to lower target address than the FMS has
counted up to.
[You will need to check addresses of free() and target() to see if it’s matching this example; if not, you…
Posted by Summer of Pwnage on Sep 08
————————————————————————
Persistent Cross-Site Scripting vulnerability in WordPress due to unsafe
processing of file names
————————————————————————
Han Sahin, July 2016
————————————————————————
Abstract
————————————————————————
A persistent Cross-Site…
Posted by Vulnerability Lab on Sep 08
Document Title:
===============
PHPHolidays CMS v3.00.50 – Cross Site Scripting Web Vulnerability
References (Source):
====================
https://www.vulnerability-lab.com/get_content.php?id=1948
Release Date:
=============
2016-09-08
Vulnerability Laboratory ID (VL-ID):
====================================
1948
Common Vulnerability Scoring System:
====================================
3.1
Product & Service Introduction:…
Posted by Vulnerability Lab on Sep 08
Document Title:
===============
Picosmos Shows v1.6.0 – Stack Buffer Overflow Vulnerability
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1936
Release Date:
=============
2016-09-05
Vulnerability Laboratory ID (VL-ID):
====================================
1936
Common Vulnerability Scoring System:
====================================
6.1
Product & Service Introduction:…
Posted by SEC Consult Vulnerability Lab on Sep 06
This advisory is accompanied by a blog post regarding a recap on our published
“House of Keys” research study on the re-use of cryptographic secrets from
11/2015.
For further information also see
http://blog.sec-consult.com/2016/09/house-of-keys-9-months-later-40-worse.html
SEC Consult Vulnerability Lab Security Advisory < 20160906-0 >
=======================================================================
title:…
Posted by Vulnerability Lab on Sep 02
Document Title:
===============
Kaspersky Company Account – FileManager Vulnerability
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1924
Release Date:
=============
2016-08-30
Vulnerability Laboratory ID (VL-ID):
====================================
1924
Common Vulnerability Scoring System:
====================================
3.5
Product & Service Introduction:…