IT-Grundschutz M4.106: Aktivieren der Systemprotokollierung

IT-Grundschutz M4.106: Aktivieren der Systemprotokollierung. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

IT-Grundschutz M4.001: Passwortschutz für IT-Systeme

IT-Grundschutz M4.001: Passwortschutz für IT-Systeme. Stand: 14. Ergänzungslieferung 14. EL. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

IT-Grundschutz M4.016: Zugangsbeschränkungen für Benutzer-Kennungen und oder Terminals

IT-Grundschutz M4.016: Zugangsbeschränkungen für Benutzer-Kennungen und oder Terminals. Stand: 14. Ergänzungslieferung 14. EL. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[SECURITY] Fedora 20 Update: vorbis-tools-1.4.0-14.fc20

Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...

GLSA-201502-14 : grep: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201502-14 grep: Denial of Service A heap buffer overrun has been fixed in the bmexectrans function in kwset.c. Impact : A local user can cause Denial of Service. Workaround : There is no known workaround at this time. %NASLMINLEVE...

Fortinet FortiWeb CSRF Vulnerability (FG-IR-14-013)

Fortinet FortiWeb is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

dnsqueries.com XSS vulnerability

Open Bug Bounty ID: OBB-54348 Description| Value ---|--- Affected Website:| dnsqueries.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Adobe Flash Player Unspecified Memory Corruption Vulnerability (Jan 2015) - Windows

Adobe Flash Player is prone to unspecified memory corruption vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Pixarbay Images 2.3 Multiple Vulnerabilities

WordPress Pixarbay Images plugin version 2.3 suffers from authentication bypass, cross site scripting, remote shell upload, and path traversal vulnerabilities. Title: WP Pixarbay Images Multiple Vulnerabilities Product: Pixarbay Images Wordpress Plugin Affected versions: 2.3 Impact: high Remote:...

Threat Outbreak Alert RuleID13123: Email Messages Distributing Malicious Software on January 14, 2015

Medium Alert ID: 37029 First Published: 2015 January 15 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13123 may contain the following files: Name |...

Threat Outbreak Alert RuleID13116: Email Messages Distributing Malicious Software on January 14, 2015

Medium Alert ID: 37014 First Published: 2015 January 15 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13116 may contain the following files: Name |...

Threat Outbreak Alert RuleID13108: Email Messages Distributing Malicious Software on January 14, 2015

Medium Alert ID: 37009 First Published: 2015 January 15 14:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13108 may contain the following files: Name |...

Lexmark MarkVision Enterprise GfdFileUploadServerlet RCE Vulnerability

Nessus was able to exploit a directory traversal vulnerability in Lexmark MarkVision Enterprise, within the 'GfdFileUploadServerlet' servlet, to upload a file to the remote host. A remote attacker can utilize this vulnerability to both upload and execute arbitrary code with SYSTEM privileges...

Lexmark MarkVision Enterprise Arbitrary File Upload Exploit

Exploit for java platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Lexmark MarkVision Enterprise Arbitrary File Upload', 'Description' = %q This...

Lexmark MarkVision Enterprise - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Lexmark MarkVision Enterprise Arbitrary File Upload', 'Description' = %q This module exploits a code execution flaw in Lexmark...

[SECURITY] Fedora 21 Update: mailx-12.5-14.fc21

Mailx is an enhanced mail command, which provides the functionality of the POSIX mailx command, as well as SysV mail and Berkeley Mail from which it is derived. Additionally to the POSIX features, mailx can work with Maildir/ e-mail storage format as well as mailboxes, supports IMAP, POP3 and SMT...

FreeBSD-SA-14:31.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:31.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in NTP suite Category: contrib Module: ntp Announced: 2014-12-23 Affects: All...

Threat Outbreak Alert RuleID12850: Email Messages Distributing Malicious Software on December 14, 2014

Medium Alert ID: 36758 First Published: 2014 December 15 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12850 may contain the following files: Name |...

Accuenergy Acuvim II AXM-NET 3.04 Multiple Vulnerabilities

Binary data 7162.pasl...

Mandriva Linux Security Advisory : phpmyadmin (MDVSA-2014:228)

Multiple vulnerabilities has been discovered and corrected in phpmyadmin : - Multiple XSS vulnerabilities CVE-2014-8958. - Local file inclusion vulnerability CVE-2014-8959. - XSS vulnerability in error reporting functionality CVE-2014-8960. - Leakage of line count of an arbitrary file...