Fedora 20 : php-5.5.14-1.fc20 (2014-7765)

26 Jun 2014, PHP 5.5.14 Core : - Fixed BC break introduced by patch for bug 67072. Anatol, Stas - Fixed bug 66622 Closures do not correctly capture the late bound class static:: in some cases. Levi Morrison - Fixed bug 67390 insecure temporary file use in the configure script. CVE-2014-3981 Remi ...

Oracle Java APPLET Tag Children Property Memory Corruption

No description provided by source. Source: http://skypher.com/index.php/2010/10/13/issue-18-oracle-java-applet-childre/ SCRIPT o=document.createElementapplet; setTimeoutfunction x=o.children; location.reload; , 1; /SCRIPT Tested with: Windows XP sp3 5.1.2600 MSIE 7.0.5730.13 MSIE 8.0.6001.18702 S...

Vino VNC Server 3.7.3 - Persistent Denial of Service

No description provided by source. Trustwave SpiderLabs Security Advisory TWSL2013-028: Persistent Denial of Service Vulnerability in Vino VNC Server Published: 09/16/13 Version: 1.0 Vendor: The GNOME Project https://wiki.gnome.org/Vino Product: Vino VNC Server Version affected: Vino VNC Server...

Firefox 3.6 (XML parser) Memory Corruption PoC/DoS

No description provided by source. Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested: version 3.6 Tested on windows XP SP3 20-01-2010 This same bug was in early version of firfox,found by Wojciech Pawlikowski This is just a update. This vulnerability...

Fedora 20 : python-2.7.5-13.fc20 (2014-7800)

Fix for CVE-2014-4616 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 20 : zabbix-2.0.12-3.fc20 (2014-7594)

Patch CVE-2014-3005 local file inclusion via XXE attack https://support.zabbix.com/browse/ZBX-8151 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Apple iChat 3.1.6 441 - aim:// URL Handler Format String Exploit PoC

No description provided by source. !DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.1//EN http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd html head titleMOAB-20-01-2007/title script function boom var str = ''; for var i = 0; i 20; i++ str = str + escape'A%n'; str = 'aim:gochat?roomname=' + str;...

20/20 Applications Data Shed 1.0 listings.asp Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21156/info 20/20 DataShed is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

WebBoard <= 2.0 Arbitrary SQL Question/Anwser Delete Vulnerability

No description provided by source. -+================================================================================+- -+ WebBoard = 2.0 Arbitrary SQL Question/Anwser Delete Vulnerability +- -+================================================================================+- Discovered By:...

Pre Studio Business Cards Designer SQL Injection

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Exploit Title: Pre Studio Business Cards Designer SQL Injection Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author: drzig Date: 20-10-2011 Software Link:...

[SECURITY] Fedora 20 Update: python-2.7.5-13.fc20

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...

[SECURITY] Fedora 20 Update: gnupg-1.4.17-1.fc20

GnuPG GNU Privacy Guard is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with...

Fedora 20 : gnupg-1.4.17-1.fc20 (2014-7676)

New upstream v1.4.17 - Avoid DoS due to garbled compressed data packets. - Screen keyserver reponses to avoid import of unwanted keys by rogue servers. - Add hash algorithms to the 'sig' records of the colon output. - More specific reason codes for INVRECP status. - Drop gpg.ru.1 Note that Tenabl...

[SECURITY] Fedora 20 Update: xen-4.3.2-5.fc20

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Fedora 20 : xen-4.3.2-5.fc20 (2014-7423)

Fix %if line typo in the spec file, Vulnerabilities in HVM MSI injection Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Threat Outbreak Alert RuleID10395: Email Messages Distributing Malicious Software on June 20, 2014

Severity Alert ID: 34677 First Published: 2014 June 20 19:19 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on June 20, 2014. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES...

Threat Outbreak Alert RuleID10394: Email Messages Distributing Malicious Software on June 20, 2014

Severity Alert ID: 34676 First Published: 2014 June 20 16:22 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on June 20, 2014. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES...

Threat Outbreak Alert RuleID10393: Email Messages Distributing Malicious Software on June 20, 2014

Severity Alert ID: 34675 First Published: 2014 June 20 16:22 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on June 20, 2014. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES...

Threat Outbreak Alert RuleID10390: Email Messages Distributing Malicious Software on June 20, 2014

Severity Alert ID: 34674 First Published: 2014 June 20 16:22 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on June 20, 2014. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES...

[SECURITY] Fedora 20 Update: kernel-3.14.8-200.fc20

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...