7954 matches found
MS16-148: Description of the security update for Office 2010: December 13, 2016
MS16-148: Description of the security update for Office 2010: December 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Security update 2016-12-13
...
Security update 2016-12-13
...
MS16-155: Security update for the .NET Framework: December 13, 2016
Includes cumulative .NET security updates and improvements in reliability in the .NET Framework.View products that this article applies to.SummaryMS16-155: Security update for the .NET Framework, includes cumulative .NET security updates and improvements in reliability in the .NET Framework. For...
MS16-148: Security Update for Microsoft Office to Address Remote Code Execution: December 13, 2016
Describes a security update that fixes vulnerabilities in Microsoft Office. The most severe of these vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office. To learn more...
DLA-739-1 jasper - security update
Bulletin has no description...
Microsoft Internet Explorer 9 MSHTML CDispNode::InsertSiblingNode Use-After-Free
Since November I have been releasing details on all vulnerabilities I found that I have not released before. This is the twenty-eighth entry in the series. This information is available in more detail on my blog at http://blog.skylined.nl/20161208001.html. There you can find a repro that triggere...
FreePBX 13: From Cross-Site Scripting to Remote Command Execution
RIPS Analysis The total amount of detected vulnerabilities is very high. Luckily, the majority of the detected vulnerabilities are inside the administration control panel, such that attackers either need to steal a valid account first or they have to trick an administrator into visiting a malicio...
www1.staging.mcdonalds.com XSS vulnerability
Vulnerable URL: http://www1.staging.mcdonalds.com/googleapps/GoogleArabicSearchAction.do?method=googlesearchLocation=kw=ar=';alert/OPENBUGBOUNTY/;x=' Details: Description| Value ---|--- Patched:| Yes, at 26.09.2017 Latest check for patch:| 26.09.2017 23:04 GMT Vulnerability type:| XSS Vulnerabili...
FreePBX 10.13.66 Remote Command Execution / Privilege Escalation Exploit
Exploit for php platform in category remote exploits !/usr/bin/env python ''' Title | FreePBX 13 Remote Command Execution and Privilege Escalation Date | 10/21/2016 Author | Christopher Davis Vendor | https://www.freepbx.org/ Version | FreePBX 13 & 14 System Recordings Module versions: 13.0.1beta...
FreePBX 13 - Remote Command Execution / Privilege Escalation
!/usr/bin/env python ''' Title | FreePBX 13 Remote Command Execution and Privilege Escalation Date | 10/21/2016 Author | Christopher Davis Vendor | https://www.freepbx.org/ Version | FreePBX 13 & 14 System Recordings Module versions: 13.0.1beta1 - 13.0.26 Tested on |...
Threat Outbreak Alert RuleID25480: Email Messages Distributing Malicious Software on October 13, 2016
Medium Alert ID: 49277 First Published: 2016 October 13 15:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25480 may contain the following files: Name |...
Threat Outbreak Alert RuleID25600: Email Messages Distributing Malicious Software on October 13, 2016
Medium Alert ID: 49275 First Published: 2016 October 13 15:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25600 may contain the following files: Name |...
Linux Kernel 3.13.1 - 'Recvmmsg' Privilege Escalation (Metasploit)
Exploit for linux platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'Linux Kernel 3.13.1 Recvmmsg Privilege Escalation', 'Description' = %q Th...
Linux Kernel 3.13.1 Recvmmsg Privilege Escalation
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'Linux Kernel 3.13.1 Recvmmsg Privilege Escalation', 'Description' = %q This module attempts to exploit CVE-2014-0038, by sendin...
FreePBX 13.x RCE Vulnerability - Active Check
FreePBX is prone to a unauthenticated remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Threat Outbreak Alert RuleID25004: Email Messages Distributing Malicious Software on September 13, 2016
Medium Alert ID: 48884 First Published: 2016 September 14 14:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25004 may contain the following files: Name ...
Security update 2016-09-13
...