Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Belkin N150 Router 1.00.08/1.00.09 - Directory Traversal

Title: Path Traversal Vulnerability Product: Belkin Router N150 Author: Rahul Pratap Singh Website: https://0x62626262.wordpress.com Contact: Linkedin: https://in.linkedin.com/in/rahulpratapsingh94 Twitter: @0x62626262 Vendor Homepage: http://www.belkin.com Firmware Tested: 1.00.08, 1.00.09 CVE:...

Belkin Router N150 Path Traversal

Title: Path Traversal Vulnerability Product: Belkin Router N150 Author: Rahul Pratap Singh Website: https://0x62626262.wordpress.com Contact: Linkedin: https://in.linkedin.com/in/rahulpratapsingh94 Twitter: @0x62626262 Vendor Homepage: http://www.belkin.com Firmware Tested: 1.00.08, 1.00.09 CVE:...

Belkin N150 Router 1.00.081.00.09 - Directory Traversal

Belkin N150 Router 1.00.081.00.09 - Directory Traversal Title: Path Traversal Vulnerability Product: Belkin Router N150 Author: Rahul Pratap Singh Website: https://0x62626262.wordpress.com Contact: Linkedin: https://in.linkedin.com/in/rahulpratapsingh94 Twitter: @0x62626262 Vendor Homepage:...

Oracle: Security Advisory (ELSA-2010-2011)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Synology Download Station Cross-Site Scripting Vulnerability

Synology Download Station is a set of web-based download applications from Synology. A cross-site scripting vulnerability exists in the 'Create download task via file upload' feature of Synology Download Station prior to version 3.5-2962, which can be exploited to inject arbitrary web script or...

CVE-2015-2962

CVE-2015-2962 concerns CGI RESCUE BloBee, a bulletin board software. The vulnerability affects BloBee v1.20 and earlier, where a remote attacker can write arbitrary files (CWE-20), which may lead to remote code execution on the server. The issue is documented across multiple sources (NVD, JVN, CN...

CVE-2014-2962

The Belkin N150 router (F9K1009, v1) contains a path traversal flaw in the webproc CGI module. The getpage parameter accepts an unrestricted file path, and the web server runs with root privileges, enabling an unauthenticated attacker on the LAN to read arbitrary files. Affected firmwares are bef...

Debian DSA-2962-1 : nspr - security update

Abhiskek Arya discovered an out of bounds write in the cvtt function of the NetScape Portable Runtime Library which could result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debi...

Belkin N150 path traversal vulnerability

Overview Belkin N150 wireless routers contain a path traversal vulnerability. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' - CVE-2014-2962Belkin N150 wireless router firmware versions 1.00.07 and earlier contain a path traversal vulnerability...

openSUSE Security Update : kernel (openSUSE-SU-2010:0734-1)

This updated openSUSE 11.3 kernel fixes the following security bugs : CVE-2010-3310: local users could corrupt kernel heap memory via ROSE sockets. CVE-2010-2962: local users could write to any kernel memory location via the i915 GEM ioctl interface. Additionally the update restores the...

CVE-2013-2962

The CVE-2013-2962 entry concerns IBM WebSphere Transformation Extender (WTX) Launcher. It describes a buffer overflow in the WTX Launcher that could allow a local attacker to cause a denial of service (process crash or Admin Console command-stream outage). Affected versions include 8.4.0.0–8.4.0....

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2001)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2001 advisory. - Revert proc: enable writing to /proc/pid/mem orabug 13619701 CVE-2012-0056 Tenable has extracted the preceding description block directly from th...

Dell SonicWALL Scrutinizer SQL Injection (CVE-2012-2962)

An SQL injection vulnerability has been reported in Dell SonicWALL Scrutinizer...

Scrutinizer < 9.5.2 d4d/statusFilter.php q Parameter SQL Injection

The version of Scrutinizer installed on the remote web server is affected by a SQL injection vulnerability in the q parameter of the 'd4d/statusFilter.php' script. An unauthenticated remote attacker can leverage this issue to manipulate database queries, leading to disclosure of sensitive...

Dell SonicWALL Scrutinizer 9 SQL Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Dell SonicWALL...

Dell SonicWALL Scrutinizer 9 - SQL Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Dell SonicWALL...

CVE-2012-2962

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter...

Dell SonicWALL Scrutinizer 'q' Parameter SQL Injection Vulnerability

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter. CVE: CVE-2012-2962 Last updated: March 12, 2018, 5:21 p.m...

CVE-2012-2962

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter...