FreeBSD : jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoS (549a2771-49cc-11e4-ae2c-c80aa9043978)

Jenkins Security Advisory : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution an...

CVE-2009-3542

creationtimestamp| type| source ---|---|--- 2014-09-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34747...

PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability

Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...

Get Simple CMS 3.3.3 CSRF / XSS / Clickjacking Vulnerabilities

Get Simple CMS version 3.3.3 suffers from cross site request forgery, clickjacking, and various cross site scripting vulnerabilities. Affected Vendor: http://get-simple.info/ Date: 23/09/2014 Discovered by: JoeV Type of vulnerability: CSRF, Click-jacking, DOM based XSS and XSS Tested on: Windows ...

CVE-2014-6037

creationtimestamp| type| source ---|---|--- 2014-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34670 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/eventlogfileupload.rb 2025-02-06 03:13:41+00:00| seen...

Threat Outbreak Alert RuleID8337: Email Messages Distributing Malicious Software on December 23, 2014

Medium Alert ID: 35450 First Published: 2014 August 27 18:11 GMT Last Updated: 2014 December 24 12:54 GMT Version: 33 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID8337K...

Security changes in Opera 23

News Security changes in Opera 23 Share August 19th, 2014 Opera 23 has been out on the stable channel for a while, and we have just released a few silent security updates as well. The first was a regular Opera security fix, the second was to take in a security patch in advance of the regular...

php security update

5.4.16-23 - fileinfo: cdfunpacksummaryinfo excessive looping DoS. CVE-2014-0237 - fileinfo: CDF property info parsing nelements infinite loop. CVE-2014-0238 - fileinfo: cdfcheckstreamoffset insufficient boundary check. CVE-2014-3479 - fileinfo: cdfcountchain insufficient boundary check...

Threat Outbreak Alert RuleID10776: Email Messages Distributing Malicious Software on July 23, 2014

Medium Alert ID: 35022 First Published: 2014 July 23 16:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10776 may contain the following files: Name | Siz...

Web Wiz Forum Injection Vulnerability

No description provided by source. Title : Web Wiz Forum Injection Vulnerability Author: eXeSoul Home : www.indishell.in or www.andhrahackers.com Email : [email protected] date : 23/3/2011 D0rk : i Powered by Web Wiz Forums category : Web Apps SQli Go To Site :- SQL injection Vulnerability...

linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 23 bytes

No description provided by source. / linux-x86-binshv2.c - 23 bytes Copyright c 2006 Gotfault Security [email protected] Linux/x86 execve/bin/sh, /bin/sh, NULL / char shellcode = \x6a\x0b // push $0xb \x58 // pop %eax \x99 // cltd \x52 // push %edx \x68\x2f\x2f\x73\x68 // push $0x68732f2f...

MMA Creative Design SQL Injection Vulnerability

No description provided by source. ========================================================= MMA Creative Design SQL Injection Vulnerability ========================================================= Name: MMA Creative Design SQL Injection Vulnerability Date: 2010-05-23 vendor: www.mmacreative.com...

Cisco 7xx Series Router DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1211/info Opening approximately 98 connections on port 23 will cause Cisco 760 Series Routers to self reboot. Continuously repeating this action will result in a denial of service attack. / Cisco 760 Series Connection...

MacOS X QuickTime RTSP Content-Type Overflow

No description provided by source. $Id: quicktimertspcontenttype.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Texas Imperial Software WFTPD 3.23 SIZE Overflow

No description provided by source. $Id: wftpdsize.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

runt-communications Design SQL Injection Vulnerability

No description provided by source. ========================================================= runt-communications Design SQL Injection Vulnerability ========================================================= Name: runt-communications Design SQL Injection Vulnerability Date: 2010-05-23 vendor:...

freebsd/x86 execve /bin/sh 23 bytes (2)

No description provided by source. / FreeBSD 23 byte execve code. Greetz to anathema, the first who published this way of writing shellcodes. greetz to preedator marcetam [email protected] / char fbsdexecve= \x99 / cdq / \x52 / push %edx / \x68\x6e\x2f\x73\x68 / push $0x68732f6e /...

linux/x86 read(0,buf,2541); chmod(buf,4755); 23 bytes

No description provided by source. / readnchmod-core.c by Charles Stevenson [email protected] Example of strace output if you pass in /bin/sh\x00 read0, /bin/sh\0, 2541 = 8 chmod/bin/sh, 04755 = 0 Any file path can be given. For example: /tmp/.sneakyguy The only caveat is that the string must be NU...

MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilities

No description provided by source. Trustwave SpiderLabs Security Advisory TWSL2013-019: Multiple Vulnerabilities in MiCasaVerde VeraLite Published: 08/01/13 Version: 1.0 Vendor: MiCasaVerde http://www.micasaverde.com/ Product: VeraLite Version affected: 1.5.408 Product description: The MiCasaVerd...

SkyBlueCanvas CMS 1.1 r248-03 - Remote Command Execution

No description provided by source. Vulnerability in SkyBlueCanvas CMS Vulnerability Type: Remote Command Injection Version Affected: 1.1 r248-03 and probably prior versions Discovered by: Scott Parish - Center for Internet Security Vendor Information: SkyBlueCanvas is an easy-to-use Web Content...