Teradata Studio Express 15.12.00.00 Race Condition
Posted by deepcore under exploit (No Respond)
Teradata Studio Express version 15.12.00.00 suffers from a /tmp race condition.
Archive for November, 2016
Habari CMS 0.9.2 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Habari CMS version 0.9.2 suffers from a cross site scripting vulnerability.
Huawei Flybox B660 3G/4G Router Authentication Bypass
Posted by deepcore under exploit (No Respond)
Huawei Flybox B660 3G/4G router suffers from an authentication bypass vulnerability.
Microsoft Internet Explorer 11 iertutil LCIEGetTypedComponentFromThread Use-After-Free
Posted by deepcore under exploit (No Respond)
A specially crafted web-page can cause the iertutil.dll module of Microsoft Internet Explorer 11 to free some memory while it still holds a reference to this memory. The module can be made to use this reference after the memory has been freed. Unlike many use-after-free bugs in MSIE, this issue, and apparently all code in […]
Palo Alto Networks PanOS root_trace Privilege Escalation
Posted by deepcore under exploit (No Respond)
Palo Alto Networks PanOS suffers from a root_trace local privilege escalation vulnerability.
Palo Alto Networks PanOS root_reboot Privilege Escalation
Posted by deepcore under exploit (No Respond)
Palo Alto Networks PanOS suffers from a root_reboot local privilege escalation vulnerability.
Microsoft Edge CTextExtractor::GetBlockText Out-Of-Bounds Read
Posted by deepcore under exploit (No Respond)
A specially crafted web-page can cause an integer underflow in Microsoft Edge. This causes CTextExtractor::GetBlockText to read data outside of the bounds of a memory block.
SAP NetWeaver AS ABAP 7.4 Directory Traversal
Posted by deepcore under exploit (No Respond)
SAP NetWeaver AS ABAP version 7.4 suffers from a directory traversal vulnerability.
SAP NetWeaver AS JAVA 7.5 Directory Traversal
Posted by deepcore under exploit (No Respond)
SAP NetWeaver AS JAVA versions 7.1 through 7.5 suffer from a directory traversal vulnerability.
Apple iOS 10.1 Access Permissions
Posted by deepcore under Apple (No Respond)