Security Only Update for .NET Framework 4.8 for Windows Server 2012 (KB4576488)

Security Only Update for .NET Framework 4.8 for Windows Server 2012 KB4576488 Applies to: Microsoft .NET Framework 4.8 Summary ClickOnce will no longer download applications from untrusted servers which use NTLM authentication, but, instead, will fail with “Authentication failed”. Sites in the...

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB4576630)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB4576630 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4576629)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4576629 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...

Security Only Update for .NET Framework 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB4576489)

Security Only Update for .NET Framework 4.8 for Windows 8.1 and Windows Server 2012 R2 KB4576489 Applies to: Microsoft .NET Framework 4.8 Summary ClickOnce will no longer download applications from untrusted servers which use NTLM authentication, but, instead, will fail with “Authentication...

CVE-2012-3336

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:36+00:00| seen| https://t.me/cibsecurity/14418...

CVE-2012-3337

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:35+00:00| seen| https://t.me/cibsecurity/14417...

CVE-2012-3338

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:33+00:00| seen| https://t.me/cibsecurity/14416...

CVE-2012-3340

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:32+00:00| seen| https://t.me/cibsecurity/14415...

CVE-2012-3341

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:30+00:00| seen| https://t.me/cibsecurity/14414...

CVE-2012-3340

IBM InfoSphere Guardium (versions 8.0, 8.01, 8.2) is affected by an XML External Entity (XXE) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker could disclose sensitive information (e.g., contents of server files such as database passwords). Root ...

CVE-2012-3338

Summary of CVE-2012-3338 : IBM InfoSphere Guardium (versions 8.0, 8.01, 8.2) contains an improper restriction on the create new user account functionality that could allow a remote attacker to bypass security restrictions and create unprivileged user accounts. IBM's IBM X-Force entry and the offi...

CVE-2012-3337

CVE-2012-3337 affects IBM InfoSphere Guardium 8.0, 8.01, and 8.2. A directory traversal flaw lets remote attackers send specially crafted URLs (../ sequences) to download arbitrary files. IBM’s advisory labels it a remote file disclosure vulnerability in Guardium. Remediation per the vendor invol...

CVE-2012-3336

The CVE-2012-3336 entry concerns IBM InfoSphere Guardium 8.0, 8.01, and 8.2. The vulnerability is a SQL injection in multiple Guardium scripts. A remote authenticated attacker could send specially-crafted SQL statements to these scripts, allowing view, addition, modification, or deletion of data ...

MaraCMS Arbitrary PHP File Upload

This module exploits an arbitrary file upload vulnerability in MaraCMS 7.5 and prior in order to execute arbitrary commands. The module first attempts to authenticate to MaraCMS. It then tries to upload a malicious PHP file to the web root via an HTTP POST request to codebase/handler.php. If the...

EulerOS 2.0 SP8 : xerces-j2 (EulerOS-SA-2020-1889)

According to the version of the xerces-j2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML...

CVE-2012-2201

CVE-2012-2201 affects IBM WebSphere MQ 7.1. The DoS arises from an error when handling user IDs, enabling a remote attacker to bypass security configuration on a SVRCONN channel and flood the queue manager. Connected sources confirm the vulnerability in WebSphere MQ 7.1 and describe denial-of-ser...

CVE-2012-2160

IBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the SUPPTEMPLATEFLAG parameter in a specially-crafted URL to execute script in a victim's Web browser within the security...

CVE-2012-2160

CVE-2012-2160 affects IBM Rational Change 5.3. The vulnerability arises from improper validation of user-supplied input, enabling a cross-site scripting attack via the SUPP_TEMPLATE_FLAG URL parameter. When a victim clicks a specially crafted link, an attacker could execute script in the browser ...

Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal

Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal Date: 2020-08-22 Exploit Author: LiquidWorm Vendor Homepage: http://www.eibiz.co.th Affected version: =3.8.0 CVE: N/A Eibiz i-Media Server Digital Signage 3.8.0 oldfile File Path Traversal Vendor: EIBIZ Co.,Ltd. Produ...

Microsoft Issues Emergency Security Updates for Windows 8.1 and Server 2012 R2

Microsoft has issued an emergency out-of-band software update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 systems to patch two new recently disclosed security vulnerabilities. Tracked as CVE-2020-1530 and CVE-2020-1537, both flaws reside in the Remote Access Service RAS in a way i...