Gentoo Security Advisory GLSA 201508-02

Gentoo Linux Local Security Checks GLSA 201508-02 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Supplement to ICSA-15-237-02 EasyIO-30P-SF Hard-Coded Credential Vulnerability

OVERVIEW This advisory supplement was originally posted to the US-CERT secure Portal library on August 25, 2015, and is being released to the NCCIC/ICS-CERT web site. This advisory supplement is to accompany the ICS-CERT advisory titled ICSA‑15‑237‑02 EasyIO-30PF-SF Hard-Coded Credential...

YesWiki 0.2 /wakka.php Path Traversal Vulnerability

Date: 2015-09-02 Exploit Author: HaHwul Exploit Author Blog: http://www.codeblack.net Vendor Homepage: http://yeswiki.net Software Link: https://github.com/YesWiki/yeswiki Version: yeswiki 0.2 Tested on: Debian Wheezy CVE :...

Slackware 14.0 / 14.1 / current : mozilla-nss (SSA:2015-219-02)

New mozilla-nss packages are available for Slackware 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-219-02. The text itself is copyrig...

Websense Triton 7.8.3/7.7 Source Code Disclosure Vulnerability

Websense Triton is prone to a source code disclosure vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Solaris 10 (sparc) : 148627-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: rmformat Utility. Supported versions that are affected are 10 and 11.2. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorize...

Slackware 14.0 : mysql (SSA:2015-132-02)

New mysql packages are available for Slackware 14.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-132-02. The text itself is copyright C Slackware Linux, Inc...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : gnupg (SSA:2015-111-02)

New gnupg packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-111-02. The text itse...

Adobe Reader JPEG2000 Region of Interest Memory Corruption (APSB10-02) - Ver2 (CVE-2009-3955)

Portable Document Format PDF is an open file format created by Adobe Systems. A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to the way Adobe Reader and Acrobat parse a PDF file containing a malformed Jp2c stream of a JpxDecode encoded da...

Cross-Site Scripting vulnerability in Websense Explorer report scheduler

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Websense Explorer report scheduler ------------------------------------------------------------------------ Han Sahin, September 2014...

Websense Reporting Cross Site Scripting

------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Websense Reporting ------------------------------------------------------------------------ Han Sahin, September 2014...

Websense Triton Source Code Disclosure

------------------------------------------------------------------------ Source code disclosure of Websense Triton JSP files via double quote character ------------------------------------------------------------------------ Han Sahin, September 2014...

KesionIMall可直接注册管理员

简要描述： 官方demo: http://imall.kesion.com/ 偶然看到kesionimall 更新了。 更新时间：2015-02-07 http://down.admin5.com/net/101171.html 详细说明： demo 测试。 注册会员。截包， 修改groupid为1.个人id为2 如图。 漏洞证明：...

GLSA-201503-02 : D-Bus: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201503-02 D-Bus: Denial of Service D-Bus doesnt validate the source of ActivationFailure signals. Impact : A local attacker could possibly cause a Denial of Service condition. Workaround : There is no known workaround at this time...

CVE-2014-9463

creationtimestamp| type| source ---|---|--- 2015-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36232...

Unfixed XSS vulnerability at www.i-mxms.com

Security researcher DevaDraco, has submitted on 27/02/2015 a cross-site-scripting XSS vulnerability affecting www.i-mxms.com, which at the time of submission ranked 20181176 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

Potential SQL injection in PostgreSQL Zend\Db adapter

More info at https://framework.zend.com/security/advisory/ZF2015-02...

T Mobile Internet Manager - DLL Hijacking (mfc71enudll)

Document Title: =============== T Mobile Internet Manager - DLL Hijacking mfc71enudll References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1434 Video: https://www.youtube.com/watch?v=C3PjVOxWvvw Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1427 Release Date:...

openSUSE: Security Advisory for seamonkey (openSUSE-SU-2015:0192-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : flash-player (openSUSE-SU-2015:0174-1)

Adobe Flash Player was updated to 11.2.202.440 bsc914463 : - APSA15-01, CVE-2015-0311 - Update of flashplayer executable binary for i386 is not available. This binary was disabled. - Security update to 11.2.202.438 bsc914333 : - APSB15-02, CVE-2015-0310 - Security update to 11.2.202.429 bsc913057...