Grand Theft Auto Panda APT Espionage Attack Platform

Researchers have discovered a mature attack platform that’s enjoyed great success eluding detection and made good use of an exploit present in a number of espionage campaigns. The attacks have concentrated largely on the automotive industry, hitting large companies primarily in Asia and only afte...

Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt13

Nov. 24, 2013 Led 2.6.32-alt13 - 2.6.32-431.el6: + CVE-2013-0228 + CVE-2013-0268 + CVE-2013-0343 + CVE-2013-0349 + CVE-2013-0871 + CVE-2013-0913 + CVE-2013-1767 + CVE-2013-1773 + CVE-2013-1774 + CVE-2013-1792 + CVE-2013-1796 + CVE-2013-1797 + CVE-2013-1798 + CVE-2013-1826 + CVE-2013-1827 +...

CVE-2012-0787

The clonefile function in transfer.c in Augeas before 1.0.0, when copyifrenamefails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the 1 .augsave or 2 destination file when using th...

CVE-2012-0786

The transformsave function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file...

CVE-2012-6607

The transformsave function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786...

CVE-2012-0786

The transformsave function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file...

UBUNTU-CVE-2012-0786

The transformsave function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file...

CVE-2012-0786

CVE-2012-0786 concerns Augeas: the transform_save function in transform.c before 1.0.0 allows local users to overwrite arbitrary files and disclose sensitive data via a symlink attack on a .augnew file. Real-world references across multiple advisories confirm the affected component is Augeas and ...

CVE-2012-0787

Augeas before 1.0.0 is affected. The clone_file function in transfer.c, when copy_if_rename_fails is set and the rename returns EXDEV or EBUSY, allows a local attacker to overwrite arbitrary files and leak sensitive data via a bind mount on .augsave or destination file (backup) or .augnew (newfil...

CVE-2012-6607

Summary (CVE-2012-0786, CVE-2012-0787, CVE-2013-6412) : AUGEAS up to 1.0.0 contains a symlink/permission bug in the transformation/save logic (transform_save in transform.c) and related file handling (clone_file/save paths). Exploitation can allow a local attacker to overwrite arbitrary files and...

CVE-2012-6607

The transformsave function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786...

Fedora Update for drupal7-context FEDORA-2013-20976

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for augeas RHSA-2013:1537-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : RDMA stack (RHSA-2013:1661)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1661 advisory. Red Hat Enterprise Linux includes a collection of Infiniband and iWARP utilities, libraries and development packages for writing application...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux 6 kernel update

Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 6. This is the fifth regular update. The Red Hat Security Response Team has...

openSUSE: Security Advisory for update (openSUSE-SU-2013:0497-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PayPal Billsafe Cross Site Scripting

Document Title: =============== PayPal Inc Bug Bounty 42 - Persistent POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=801 PayPal Security UID: kxy1ea5ech Release Date: ============= 2013-11-18 Vulnerability Laboratory ID VL-ID:...

SuSE Update for kernel openSUSE-SU-2013:0925-1 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201309251.nasl 8448 2018-01-17 16:18:06Z teissa $ SuSE Update for kernel openSUSE-SU-2013:0925-1 kernel Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

openSUSE: Security Advisory for update (openSUSE-SU-2013:0502-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tridium NiagaraAX Directory Traversal Vulnerability

Overview This advisory provides mitigation details for a vulnerability in the Tridium NiagaraAX software. Independent researchers Billy Rios and Terry McCorkle discovered a directory traversal vulnerability in the Tridium NiagaraAX software product. They demonstrated that with a valid user accoun...