openSUSE Security Update : flash-player (openSUSE-SU-2013:1737-1)

Adobe Flash Player was updated to 11.2.202.327: bnc850220 - APSB13-26, CVE-2013-5329, CVE-2013-5330 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-879. The text description of...

GLSA-201401-26 : Zabbix: Shell command injection

The remote host is affected by the vulnerability described in GLSA-201401-26 Zabbix: Shell command injection If a flexible user parameter is configured in Zabbix agent, including a newline in the parameters will execute newline section as a separate command even if UnsafeUserParameters are...

上海释锐教育 EEOA智慧校园系统命令执行（涉及全国26个省各种学校）

简要描述： 上海释锐教育 EEOA智慧校园系统命令执行（涉及全国26个省各种学校） 上海市： 普陀区教育局 | 徐汇区教育局 | 奉贤区教师进修学院 | 闵行区教育学院 | 上海市金汇实验学校 | 上海师范大学第三附属实验学校 | 嘉定区华亭中学 | 闵行第二中学 | 闵行区北桥中学 | 闵行区复旦万科实验学校 | 闵行区古美学校 | 闵行区华漕学校 | 上海市师资培训中心实验基地附属中学 | 闵行区教师进修学院附属梅陇实验学校 | 闵行区龙柏中学 | 闵行区明星学校 | 闵行区梅陇中学 | 闵行区浦江第一中学 | 闵行区浦江第二中学 | 七宝中学 | 闵行区启音学校 |...

MozillaThunderbird,seamonkey (important)

Mozilla Thunderbird was updated to 24.4.0. Mozilla SeaMonkey was updated to 2.25. MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 Miscellaneous memory safety hazards MFSA 2014-17/CVE-2014-1497 bmo966311 Out of bounds read during WAV file decoding MFSA 2014-18/CVE-2014-1498 bmo935618...

JIRA Issues Collector Directory Traversal

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'JIRA Issues Collector Directory Traversal', 'Description' = %q This module exploits a directory traversal flaw in JIRA 6.0.3. The...

GDL 4.2 - Multiple Vulnerabilities

GDL 4.2 - Multiple Vulnerabilities - Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested : Apache/2.2.22 Win32 PHP/5.4.3 - Date : 26/02/2014 - Google Dork : "Powered by...

TIBCO Security Advisory: February 26, 2014 - TIBCO® EnterpriseAdministrator

TIBCO® Enterprise Administrator Vulnerability Original releasedate: Feb 26, 2014 Last revised: -- CVE-2014-2075 Source: TIBCO Software Inc. TIBCO Enterprise Administrator Vulnerability Original release date: Feb 26, 2014 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO Enterpri...

Threat Outbreak Alert: Fake Employment Information Email Messages on February 26, 2014

Medium Alert ID: 33059 First Published: 2014 February 26 18:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain employment information for the recipient. The text in the email message attempts to convince the recipient to...

Mozilla Thunderbird - WireTap Remote 0Day Vulnerability

Document Title: =============== Mozilla Thunderbird - WireTap Remote 0Day Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1182 View: http://www.youtube.com/watch?v=mqZ4eY2th0s Advisory: http://www.vulnerability-lab.com/getcontent.php?id=967 Release Date:...

Adobe Flash Player Memory Corruption (APSB13-26: CVE-2013-5329)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Fedora 19 : firefox-26.0-2.fc19 / xulrunner-26.0-1.fc19 (2013-23127)

Update to Firefox 26. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Mozilla Releases Multiple Updates

The Mozilla Foundation has released updates for the following products to address multiple vulnerabilities. Firefox 26 Firefox ESR 24.2 Thunderbird 24.2 SeaMonkey 2.23 These vulnerabilities could allow a remote attacker to bypass intended security restrictions, conduct a spoofing attack, execute...

Threat Outbreak Alert: Fake Product Catalog Email Messages on March 26, 2014

Medium Alert ID: 32054 First Published: 2013 December 6 19:01 GMT Last Updated: 2014 March 27 12:56 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product catalogue for the recipient. The text in the email message...

php security, bug fix, and enhancement update

5.3.3-26 - add security fix for CVE-2013-4248 5.3.3-25 - rename patch to math CVE-2010-3709 name - add security fixes for CVE-2006-7243, CVE-2013-1643 5.3.3-24 - fix buffer overflow in pdopgsqlerror 969110 - fix double free when destroyzendclass fails 910466 - fix segfault in errorhandler with...

CVE-2013-6173

Multiple cross-site request forgery CSRF vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to...

Directory traversal

Directory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allows remote authenticated users to read arbitrary...

Sql injection

Multiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote authenticated users to execute...

CVE-2013-6175

Multiple cross-site scripting XSS vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to inject...

CVE-2013-6174

Multiple open redirect vulnerabilities in xAdmin in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to redirect...

SuSE Update for flash-player openSUSE-SU-2013:1717-1 (flash-player)

Check for the Version of flash-player OpenVAS Vulnerability Test $Id: gbsuse201317171.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for flash-player openSUSE-SU-2013:1717-1 flash-player Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...