Threat Outbreak Alert RuleID15263: Email Messages Distributing Malicious Software on May 13, 2015

Medium Alert ID: 38837 First Published: 2015 May 14 18:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15263 and RuleID15263KVR may contain the following...

Fedora 20 : wpa_supplicant-2.0-13.fc20 (2015-6952)

This update addresses a security vulnerability identified as CVE-2015-1863 . More information on this vulnerability is provided by upstream at https://w1.fi/security/2015-1/wpasupplicant-p2p-ssid-overflow.txt . An extract : Attacker or a system controlled by the attacker needs to be within radio...

Fedora 20 : lcms-1.19-13.fc20 (2015-1648)

apply patch for CVE-2013-4276 - apply patch for 'Use of uninitialized values on 64 bit machines.' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Nodes Studio CMS XSS / Path Disclosure / SQL Injection

Hello list! There are SQL Injection, Cross-Site Scripting and Full Path Disclosure vulnerabilities in Nodes Studio CMS. This is Russian commercial CMS, which I found at one site of Russian terrorists and propagandists. ------------------------- Affected vendors: ------------------------- Nodes...

lexon-design.com XSS vulnerability

Open Bug Bounty ID: OBB-58229 Description| Value ---|--- Affected Website:| lexon-design.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Threat Outbreak Alert RuleID14559: Email Messages Distributing Malicious Software on April 13, 2015

Medium Alert ID: 38344 First Published: 2015 April 13 12:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14559 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID13988: Email Messages Distributing Malicious Software on March 13, 2015

Medium Alert ID: 37864 First Published: 2015 March 14 05:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13988 may contain the following files: Name | Si...

Siemens SIMATIC WinCC (TIA Portal) 13 < 13 SP1 Multiple Vulnerabilities (SSA-543623)

Binary data scadasiemenstiawinccmultiplevulnerabilitiesSSA-543623.nbin...

VDDK error: 13 - Troubleshooting

Challenge Backup/Replication jobs fail with: VDDK error: 13.You do not have access rights to this file Solution Below is a list of possible solutions to this issue sorted by what transport mode was being used when this error occurred. Note: There are many causes for VDDK 13; this list is not...

Design/Logic Flaw

The InputAccel Database IADB installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel IA SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file...

Fortinet FortiWeb Multiple Vulnerabilities (FG-IR-13-009)

Fortinet FortiWeb is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:fortinet:fortiweb"; if...

CVE-2015-1400

SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter...

Sql injection

SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter...

CVE-2015-1400

NPDS Revolution 13 (NPDS CMS Revolution-13) contains a SQL injection vulnerability in search.php that can be exploited via the query parameter to execute arbitrary SQL commands. The issue is described across multiple sources as a remote SQL injection affecting NPDS Revolution 13, with the root ca...

CVE-2015-1400

SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter...

NPDS CMS Revolution-13 SQL Injection Vulnerability

NPDS CMS Revolution-13 suffers from a remote SQL injection vulnerability. Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12...

ZeroCMS 1.3.3 SQL Injection

Advisory: SQL injection vulnerabilities in zerocms = v.1.3.3 Advisory ID: SROEADV-2015-13 Author: Steffen Rösemann Affected Software: zerocms = v.1.3.3 released 23rd-Jan-2015 Vendor URL: http://aas9.in/zerocms/ Vendor Status: platform will be moving to Rails4 CVE-ID: - ==========================...

NPDS CMS Revolution-13 SQL Injection

Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12 http://websecgeeks.com/npds-cms-sql-injection/ Release Date: =============...

Adobe Flash Player Unspecified Memory Corruption Vulnerability (Jan 2015) - Windows

Adobe Flash Player is prone to unspecified memory corruption vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

NPDS CMS REvolution-13 - SQL Injection

Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12 http://websecgeeks.com/npds-cms-sql-injection/ Release Date: =============...