Threat Outbreak Alert RuleID14325: Email Messages Distributing Malicious Software on March 29, 2015

Medium Alert ID: 38096 First Published: 2015 March 30 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14325 may contain the following files: Name | Si...

FiyoCMS 2.0.1.8 XSS / SQL Injection / URL Bypass

Exploit Title: FiyoCMS Multiple Vulnerabilities Date: 29 March 2015 Exploit Author: Mahendra Vendor Homepage: www.fiyo.org Software Link: http://sourceforge.net/projects/fiyo-cms/ Version: 2.0.1.8, other version might be vulnerable. Tested : Kali Linux 1.0.9a-amd64 CVEs:...

Security update for MozillaFirefox (important)

MozillaFirefox was updated to Firefox 36.0.4 to fix two critical security issues found during Pwn2Own: MFSA 2015-28/CVE-2015-0818 bmo1144988 Privilege escalation through SVG navigation MFSA 2015-29/CVE-2015-0817 bmo1145255 Code execution through incorrect JavaScript bounds checking elimination Al...

Debian DLA-29-1 : puppet security update

It was discovered that the puppet package did not restrict the permissions and ownership of the /var/log/puppet directory, which may expose sensitive information. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has...

Threat Outbreak Alert RuleID13333: Email Messages Distributing Malicious Software on January 29, 2015

Medium Alert ID: 37232 First Published: 2015 January 29 21:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13333 may contain the following files: Name |...

Fedora 21 : jasper-1.900.1-29.fc21 (2014-16292)

Fixes various flaws: CVE-2014-9029, CVE-2014-8138, CVE-2014-8137 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Adobe Shockwave Player <= 12.0.6.147 Memory Corruptions (APSB13-29) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is prior to or equal to 12.0.6.147. It is, therefore, affected by two memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulting in...

Adobe ColdFusion Unspecified DoS (APSB14-29) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by an unspecified denial of service vulnerability due to a resource consumption issue. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid79859; scriptversion"1.8"; scriptcvsdate"Date:...

OracleVM 2.2 : xen (OVMSA-2012-0058)

The remote OracleVM system is missing necessary patches to address critical security updates : XSA-27: hvm: Limit the size of large HVM op batches orabug 15907978 CVE-2012-5511 XSA-29: add missing guest address range checks to XENMEMexchange handlers orabug 15907996 CVE-2012-5513 XSA-30: xen: fix...

ShopBuilder 5.6.1 /module/patment/admin/bank_account_mod.php SQL注入漏洞

No description provided by source. !/usr/bin/env python coding=utf-8 import re import urllib2 from comm import cmdline from comm import generic pocinfo = 'VulId': '1567', 'Name': 'ShopBuilder 5.6.1 /module/patment/admin/bankaccountmod.php SQL注入漏洞 POC', 'AppName': 'ShopBuilder', 'AppPowerLink':...

ShopBuilder 5.6.1 /module/activity/admin/activity.php SQL注入漏洞

No description provided by source. !/usr/bin/env python coding=utf-8 import re import urllib2 from comm import cmdline from comm import generic pocinfo = 'VulId': '1564', 'Name': 'ShopBuilder 5.6.1 /module/activity/admin/activity.php SQL注入漏洞 POC', 'AppName': 'ShopBuilder', 'AppPowerLink':...

ShopBuilder 5.6.1 /module/news/admin/newslist.php chk SQL注入漏洞

No description provided by source. !/usr/bin/env python coding=utf-8 import re import urllib2 from comm import cmdline from comm import generic pocinfo = 'VulId': '1569', 'Name': 'ShopBuilder 5.6.1 /module/news/admin/newslist.php chk SQL注入漏洞 POC', 'AppName': 'ShopBuilder', 'AppPowerLink':...

Threat Outbreak Alert RuleID11741: Email Messages Distributing Malicious Software on September 29, 2014

Medium Alert ID: 35863 First Published: 2014 September 29 13:48 GMT Last Updated: 2014 September 29 16:17 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat...

bancety.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-50296 Description| Value ---|--- Affected Website:| bancety.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

skid-row.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-50289 Description| Value ---|--- Affected Website:| skid-row.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

Threat Outbreak Alert RuleID11325: Email Messages Distributing Malicious Software on August 29, 2014

Medium Alert ID: 35485 First Published: 2014 August 29 18:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11325 may contain the following files: Name |...

WWW File Share Pro v7.0 - Remote Denial of Service

Document Title: =============== WWW File Share Pro v7.0 - Remote Denial of Service References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1309 View: https://www.youtube.com/watch?v=1Y-B7ctbixs Release Date: ============= 2014-08-29 Vulnerability Laboratory ID VL-ID:...

Assessing risk for the July 2014 security updates

Today we released six security bulletins addressing 29 unique CVE’s. Two bulletins have a maximum severity rating of Critical, three have maximum severity Important, and one is Moderate. We hope that the table below helps you prioritize the deployment of the updates appropriately for your...

WS-FTP Server 5.03 MKD Overflow

No description provided by source. $Id: wsftpserver503mkd.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

linux/x86 if(read(fd,buf,512)<=2) _exit(1) else buf(); 29 bytes

No description provided by source. / h3ll-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than...