Linksys WVBR0-25 User-Agent Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linksys WVBR0-25 User-Agent Command Execution', 'Description' = %q The Linksys WVBR0-25 Wireless Video Bridge, used by DirecTV to connect wireless...

Linksys WVBR0-25 - User-Agent Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linksys WVBR0-25 User-Agent Command Execution', 'Description' = %q The Linksys WVBR0-25 Wireless Video Bridge, used by DirecTV to connect wireless...

Threat Outbreak Alert RuleID31691: Email Messages Distributing Malicious Software on December 25, 2017

Medium Alert ID: 56331 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31691 may contain the following files: Name |...

Threat Outbreak Alert RuleID31680: Email Messages Distributing Malicious Software on December 25, 2017

Medium Alert ID: 56330 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31680 may contain the following files: Name |...

Threat Outbreak Alert RuleID31673: Email Messages Distributing Malicious Software on December 25, 2017

Medium Alert ID: 56329 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31673 may contain the following files: Name |...

umobi.wirelessdealer.ca XSS vulnerability

Open Bug Bounty ID: OBB-458614 Description| Value ---|--- Affected Website:| umobi.wirelessdealer.ca Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

kandoo.cz XSS vulnerability

Open Bug Bounty ID: OBB-458414 Description| Value ---|--- Affected Website:| kandoo.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

telemundo.com XSS vulnerability

Open Bug Bounty ID: OBB-457942 Description| Value ---|--- Affected Website:| telemundo.com Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet Vulnerable URL:...

Linksys WVBRO-25 Detection

This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linksys WVBR0 25 Command Injection(CVE-2017-17411)

In this guest blog, Trend Micro DVLabs researcher Ricky Lawshae discusses the recently disclosed CVE-2017-17411. He discovered and reported this bug through the ZDI program. Earlier this year, I learned that AT&T was starting to move customers away from its U-Verse service in favor of its DirecTV...

Fedora 25 : rubygem-yard (2017-ca05b30e86)

Fix to directory traversal attacks CVE-2017-17042. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 25 : openssh (2017-78f0991378)

Security fix for CVE-2017-15906: Improper write operations in readonly mode 1506630 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 25 : firefox (2017-2c15e19fb5)

Update to latest upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 25 : fedora-arm-installer (2017-62f44716bb)

Update to 2.1 ---- Update to 2.0, Initial support for aarch64 images and associated SBCs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Linksys WVBR0-25 User-Agent Command Execution

The Linksys WVBR0-25 Wireless Video Bridge, used by DirecTV to connect wireless Genie cable boxes to the Genie DVR, is vulnerable to OS command injection in version use exploit/linux/http/linksys/wvbr0useragentexecnoauth msf undefinedwvbr0useragentexecnoauth show actions ...actions... msf...

Fedora 25 : pdns-recursor (2017-81fe39ad9f)

Update to latest version. Contains security fixes for CVE-2017-15090, CVE-2017-15092, CVE-2017-15093 and CVE-2017-15094 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

[SECURITY] Fedora 25 Update: rubygem-yard-0.8.7.6-4.fc25

YARD is a documentation generation tool for the Ruby programming language. It enables the user to generate consistent, usable documentation that can be exported to a number of formats very easily, and also supports extending for custom Ruby constructs such as custom class level definitions...

[SECURITY] Fedora 25 Update: firefox-57.0.1-1.fc25

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 25 Update: pdns-recursor-4.0.7-1.fc25

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

[SECURITY] Fedora 25 Update: fedora-arm-installer-2.1-1.fc25

Allows one to first select a source image local or remote. The image must be a binary file containing: MBR + Partitions + File Systems + Data. A destination block device should then be selected for final installation...