WordPress Popup By Supsystic 1.7.6 Cross Site Request Forgery

------------------------------------------------------------------------ Popup by Supsystic WordPress plugin vulnerable to Cross-Site Request Forgery ------------------------------------------------------------------------ Radjnies Bhansingh, July 2016...

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery !-- Source: https://sumofpwn.nl/advisory/2016/popupbysupsysticwordpresspluginvulnerabletocrosssiterequestforgery.html Abstract A Cross-site Request Forgery vulnerablity exists in the Popup by Supsystic WordPress Plugin. This...

Oracle Linux 7 : ghostscript (ELSA-2017-0013)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0013 advisory. 9.07-201 - Added security fixes for: - CVE-2013-5653 bug 1380327 - CVE-2016-7977 bug 1380415 - CVE-2016-7978 bug 1382300 - CVE-2016-7979 bug 1382305 -...

Virtuozzo Linux Errata and Security Advisory 2017:0013 Moderate

Upstream security update. Follow RHSA-2017-0013 for details...

FreeBSD : moodle -- multiple vulnerabilities (8656cf5f-4170-11e6-8dfe-002590263bf5)

Marina Glancy reports : - MSA-16-0013: Users are able to change profile fields that were locked by the administrator. - MSA-16-0015: Information disclosure of hidden forum names and sub-names. - MSA-16-0016: User can view badges of other users without proper permissions. - MSA-16-0017: Course...

Oracle: Security Advisory (ELSA-2009-0013)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-1845)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-0013)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : libyaml (SUSE-SU-2015:0013-1)

This libyaml update fixes the following security issue : - bnc907809: assert failure when processing wrapped strings CVE-2014-9130 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clea...

VMware Releases Updates for vCAC

VMware has released security updates to address a critical vulnerability in vCloud Automation Center vCAC, which could allow a remote attacker to take control of a vulnerable system. US-CERT encourages users and administrators to review VMware Security Advisory VMSA-2014-0013 and apply the...

Microsoft Windows Assembly Execution Vulnerability MS12-005

No description provided by source. Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability Date: 1/14/2012 Author: Byoungyoung Lee, http://exploitshop.wordpress.com Version: Windows 7 32bit, fully patched until Jan 2012 Tested on: Windows 7 32bit CVE : CVE-2012-0013 PoC:...

Pidgin MSN <= 2.6.4 File Download Vulnerability

No description provided by source. !/usr/bin/env python Pidgin MSN = 2.6.4 file download vulnerability 19 January 2010 Mathieu GASPARD [email protected] Description: Pidgin is a multi-protocol Instant Messenger. This is an exploit for the vulnerability1 discovered in Pidgin by Fabian Yamaguchi. T...

openSUSE Security Update : tomcat6 (openSUSE-SU-2011:0146-1)

This tomcat6 update fixes : - CVE-2010-3718: CVSS v2 Base Score: 4.0 AV:N/AC:H/Au:N/C:P/I:P/A:N: Design Error CWE-DesignError - CVE-2011-0013: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N: XSS CWE-79 - CVE-2011-0534: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Resource Management...

VMware Player 5.x < 5.0.3 Host Privilege Escalation (VMSA-2013-0013)

The installed version of VMware Player 5.x running on Linux is earlier than 5.0.3. It therefore reportedly contains a vulnerability in its handling of shared libraries. This issue may allow a local, malicious user to escalate privileges to root on the host. C Tenable Network Security, Inc...

VMware Workstation 9.x < 9.0.3 Multiple Privilege Escalation Vulnerabilities (VMSA-2013-0013 / VMSA-2013-0014)

The installed version of VMware Workstation 9.x is prior to 9.0.3. It is, therefore, affected by multiple local privilege escalation vulnerabilities : - An issue exists in the handling of shared libraries that could allow a local, malicious user to escalate privileges on Linux hosts. CVE-2013-597...

VMware vCenter Operations Manager Arbitrary File Upload (VMSA-2012-0013)

The version of vCenter Operations Manager installed on the remote host is earlier than 5.0.3. It is, therefore, potentially affected by an arbitrary file upload vulnerability in the Apache Struts component. By exploiting this flaw, a remote, unauthenticated attacker could overwrite arbitrary file...

Oracle Linux 5 : avahi (ELSA-2009-0013)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-0013 advisory. 0.6.16-1.el5.1 - Resolves: CVE-2008-5081 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 4 : pidgin (ELSA-2010-0044)

From Red Hat Security Advisory 2010:0044 : Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which c...

Oracle Linux 6 : qemu-kvm (ELSA-2012-0050)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0050 advisory. - Resolves: bz772081 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy mode packets heap overflow rhel-6.2.z - CVE: CVE-2011-4127 - Resolves: bz7677...

Oracle Linux 5 : tomcat5 (ELSA-2012-0474)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0474 advisory. - Resolves: CVE-2012-0022, CVE-2011-4858 - Resolves CVE-2011-0013 rhbz 675933 - Resolves CVE-2011-3718 rhbz 675933 - Resolves CVE-2011-1184 rhbz 744984...