Linux Kernel 3.13.1 - 'Recvmmsg' Local Privilege Escalation (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'Linux Kernel 3.13.1 Recvmmsg Privilege Escalation', 'Description' = %q This module attempts to exploit CVE-2014-0038, by sendin...

RedHat Update for tomcat RHSA-2016:2046-01

The remote host is missing an update for the Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 7 : tomcat (RHSA-2016:2046)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:2046 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: It was discovered that the...

Linux Kernel 3.13.1 Recvmmsg Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'Linux Kernel 3.13.1 Recvmmsg Privilege Escalation', 'Description' = %q This module attempts to exploit CVE-2014-0038, by sendin...

tomcat security update

0:7.0.54-8 - Resolves: rhbz1368121 0:7.0.54-7 - Resolves: rhbz1362212 Tomcat: CGI sets environmental variable based on user supplied Proxy request header - Resolves: rhbz1368121 0:7.0.54-5 - Resolves: rhbz1362567 0:7.0.54-4 - Resolves: CVE-2015-5346 0:7.0.54-3 - Resolves: CVE-2014-7810...

Beckhoff Embedded PC Image and Automation Device Specification TwinCAT Component Security Bypass Vulnerability

Beckhoff Embedded PC Images and Automation Device Specification ADS TwinCAT Components are Beckhoff products for critical infrastructure applications in manufacturing, energy and wastewater systems. Beckhoff Embedded PC Images is a functionally configurable industrial control system for...

Railo Remote File Include (CVE-2014-5468)

This module exploits a remote file include vulnerability in Railo. A vulnerability in thumbnail.cfm allows an attacker to download an arbitrary PNG file, and by taking advantage of a directory traversal, an attacker can append cold fusion markup to the PNG file, and have it interpreted by the...

openSUSE: Security Advisory for python-Jinja2 (openSUSE-SU-2016:2465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for python-Jinja2 (important)

This update for python-Jinja2 fixes the following issues: Update to version 2.8: - Added target parameter to urlize function. - Added support for followsymlinks to the file system loader. - The truncate filter now counts the length. - Added equalto filter that helps with select filters. - Changed...

CVE-2014-5415

Beckhoff CVE-2014-5415 applies to Embedded PC Images released before 2014-10-22 and TwinCAT ADS components. The underlying issue is exposure of vulnerable services (Windows CE Remote Configuration Tool, CE Remote Display service, TELNET) that can allow remote access. A CVSSv3 base score of 9.1 (A...

CVE-2014-5414

Beckhoff Embedded PC Images (pre-2014-10-22) and Automation Device Specification (ADS) TwinCAT components expose an authentication-bruteforce risk due to not limiting login attempts. This remote vulnerability could allow unauthorized access via brute-force over ADS-related services. Affected buil...

Tuleap PHP Unserialize Code Execution (CVE-2014-8791)

This module exploits a PHP object injection vulnerability. Tuelap could be abused to allow authenticated users to execute arbitrary code with the permissions of the web server. This could lead to execute PHP code on the server...

Security update for php5 (important)

This update for php5 fixes the following security issues: CVE-2016-6128: Invalid color index not properly handled bsc987580 CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 CVE-2016-6292: Null pointer dereference in exifprocessusercomment...

Ubuntu 14.04 LTS : Pillow regresssion (USN-3090-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3090-2 advisory. USN-3090-1 fixed vulnerabilities in Pillow. The patch to fix CVE-2014-9601 caused a regression which resulted in failures when processing certain png images. This...

USN-3090-2: Pillow regresssion

USN-3090-1 fixed vulnerabilities in Pillow. The patch to fix CVE-2014-9601 caused a regression which resulted in failures when processing certain png images. This update temporarily reverts the security fix for CVE-2014-9601 pending further investigation. We apologize for the inconvenience...

SUSE-RU-2016:2413-1 Recommended update for libxml2

This update for libxml2 fixes an issue when processing external entities introduced with the fix for CVE-2014-0191...

VulnCheck KEV: CVE-2014-0564

Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial o...

SOL72372334 - FreeType vulnerability CVE-2014-9745

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

Ubuntu 14.04 LTS : Pillow vulnerabilities (USN-3090-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3090-1 advisory. It was discovered that a flaw in processing a compressed text chunk in a PNG image could cause the image to have a large size when decompressed,...

openSUSE Security Update : freerdp (openSUSE-2016-1132)

This update for freerdp fixes the following issues : Security issues fixed : - CVE-2013-4118: Add a NULL pointer check to fix a server crash boo829013. - CVE-2014-0791: The remaining length in the stream is checked before doing some malloc, which could have lead to crashes. boo857491. %NASLMINLEV...