Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

Multiple vulnerabilities exist in the kernel-image-2.6.8-13-amd64-k8 operating system from Debian GNU/Linux. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Design/Logic Flaw

EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions...

motortrader.com.my XSS vulnerability

Vulnerable URL: http://www.motortrader.com.my/usedcar/summary.php?keyword=" autofocus onfocus="alert'OPENBUGBOUNTY' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 105957 VIP websit...

Ubiquiti airOS - Arbitrary File Upload (Metasploit)

Exploit for unix platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ubiquiti airOS Arbitrary File Upload', 'Description' = %q This module exploits a pre-auth fi...

andreashess.eu XSS vulnerability

Vulnerable URL: http://www.andreashess.eu/arbeiten.php?kategorie=ARCHIV=41=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

Threat Outbreak Alert RuleID22788: Email Messages Distributing Malicious Software on May 13, 2016

Medium Alert ID: 46161 First Published: 2016 May 13 13:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22788 may contain the following files: Name | Size...

bebopclothing.com XSS vulnerability

Vulnerable URL: http://bebopclothing.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 667402...

SUSE-SU-2016:1279-1 Security update for mysql

mysql was updated to version 5.5.49 to fix 13 security issues. These security issues were fixed: - CVE-2016-0644: Unspecified vulnerability allowed local users to affect availability via vectors related to DDL bsc976341. - CVE-2016-0646: Unspecified vulnerability allowed local users to affect...

lib32-openssl: multiple issues

CVE-2016-2105 buffer overflow: An overflow can occur in the EVPEncodeUpdate function which is used for Base64 encoding of binary data. If an attacker is able to supply very large amounts of input data then a length check can overflow resulting in a heap corruption. Internally to OpenSSL the...

OpenSSL Patches Padding Oracle Attack Bug

The latest batch of OpenSSL security patches were released today, with a pair of high-severity flaws and four low-severity issues addressed in OpenSSL 1.0.1t and OpenSSL 1.0.2h. One of the high-severity flaws, CVE-2016-2107, opens the door to a padding oracle attack that can allow for the...

Vulnerability in OpenSSL - Padding oracle in AES-NI CBC MAC check

A MITM attacker can use a padding oracle attack to decrypt traffic when the connection uses an AES CBC cipher and the server support AES-NI. This issue was introduced as part of the fix for Lucky 13 padding attack CVE-2013-0169. The padding check was rewritten to be in constant time by making sur...

Threat Outbreak Alert RuleID22227: Email Messages Distributing Malicious Software on April 13, 2016

Medium Alert ID: 44647 First Published: 2016 April 13 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22227 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID22242: Email Messages Distributing Malicious Software on April 13, 2016

Medium Alert ID: 44648 First Published: 2016 April 13 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22242 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID22212: Email Messages Distributing Malicious Software on April 13, 2016

Medium Alert ID: 44633 First Published: 2016 April 13 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22212 may contain the following files: Name | Si...

Fedora 22 : qemu-2.3.1-13.fc22 (2016-bfaf6a133b)

CVE-2016-2538: Integer overflow in usb module bz 1305815 CVE-2016-2841: ne2000: infinite loop bz 1304047 CVE-2016-2857: net: out of bounds read bz 1309564 CVE-2016-2392: usb: NULL pointer dereference bz 1307115 spice: fix spicechraddwatch crash bz 1315049 Note that Tenable Network Security has...

FreeBSD : bind -- denial of service vulnerability (c9075321-f483-11e5-92ce-002590263bf5)

ISC reports : An error parsing input received by the rndc control channel can cause an assertion failure in sexpr.c or alist.c. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

Threat Outbreak Alert RuleID21689: Email Messages Distributing Malicious Software on March 13, 2016

Medium Alert ID: 44095 First Published: 2016 March 15 17:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21689 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID21687: Email Messages Distributing Malicious Software on March 13, 2016

Medium Alert ID: 44093 First Published: 2016 March 15 17:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21687 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID21683: Email Messages Distributing Malicious Software on March 13, 2016

Medium Alert ID: 44108 First Published: 2016 March 15 17:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21683 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID21470: Email Messages Distributing Malicious Software on March 13, 2016

Medium Alert ID: 44100 First Published: 2016 March 14 21:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21470 may contain the following files: Name | Si...