[SECURITY] Fedora 26 Update: kdelibs-4.14.30-2.fc26

Libraries for KDE 4...

[SECURITY] Fedora 25 Update: kdelibs-4.14.30-2.fc25

Libraries for KDE 4...

lsps2007.cam-content.com XSS vulnerability

Vulnerable URL: http://lsps2007.cam-content.com/SearchEx.aspx?searchbox=1=erotik-kleinanzeigen-com=a%3e%27%3e%22%3et%3ci%3ep%3cimgsrc%3dyonerror%3dprompt%2fopenbugbounty%2f%3e=Unbekannte+Anmeldedaten=a%3e%27%3e%22%3et%3ci%3ep%3cimg+src%3dy+onerror%3dprompt%2fopenbugbounty%2f%3e Details:...

CVE-2015-5436

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

Code injection

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

CVE-2015-5436

A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...

CVE-2015-5436

HP Integrated Lights-Out 4 (iLO 4) firmware versions 2.11 through 2.29 are affected by CVE-2015-5436; the vulnerability could be exploited remotely to cause a Denial of Service (DoS). Public technical details are limited in the provided documents; exploitation status is not specified. Remediation...

ffmpeg: Heap-buffer-overflow in sbr_x_gen

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5075102901207040 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

fit-4.net XSS vulnerability

Vulnerable URL: http://www.fit-4.net/Fit4Net/Webhosting/Webdesign/Bad-Elster/Fit4Net-Domaincheck-Domain-frei/23.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Threat Outbreak Alert RuleID28988: Email Messages Distributing Malicious Software on May 4, 2017

Medium Alert ID: 53714 First Published: 2017 May 4 19:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28988 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID29006: Email Messages Distributing Malicious Software on May 4, 2017

Medium Alert ID: 53711 First Published: 2017 May 4 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29006 may contain the following files: Name | Size ...

Product update: Virtuozzo 7.0 Update 4 (7.0.4-1025)

The Update 4 for Virtuozzo 7.0 provides new features, a security fix, and stability and usability bug fixes. Vulnerability id: PSBM-60181 A vulnerability in container resource limiting mechanism could potentially lead to DoS attacks...

[SECURITY] Fedora 26 Update: log4j-2.7-4.fc26

Log4j is a tool to help the programmer output log statements to a variety of output targets...

Null pointer dereference

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of bfdelflargecomsection. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library,...

bportal.staedteregion-aachen.de XSS vulnerability

Vulnerable URL: https://bportal.staedteregion-aachen.de/login?ppid=1WARsracsucheportletplifecycle=0pstate=maximizedpmode=view Details: Description| Value ---|--- Patched:| Yes, at 04.05.2017 Latest check for patch:| 04.05.2017 07:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

PostgreSQL Administration Tool pgAdmin 4 XSS vulnerabilities found and use-vulnerability and early warning-the black bar safety net

This article I'm going to tell you how I find and use pgAdmin4 desktop clientXSSvulnerabilities. In reading this article, please upgrade as soon as possible to 1. 4 version. Foreword Since I am a hand inadvertently to a new MacBookPro on that big ridiculously Touchpad, pgAdmin 4 page constantly...

FreeBSD-SA-17:04.ipfilter

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-17:04.ipfilter Security Advisory The FreeBSD Project Topic: ipfilter4 fragment handling panic Category: contrib Module: ipfilter Announced: 2017-04-27 Credits:...

host-express.pro XSS vulnerability

Vulnerable URL: https://host-express.pro/reg.php?tarif=Windows%20-%204=winhost Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 923480 VIP website status:| No Check host-express.pro...

HPE LoadRunner 'libxdrutil.dll mxdr_string method' RCE Vulnerability

HPE LoadRunner is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian DLA-908-1 : chicken security update

It was found that CHICKEN did not sanitize the size argument when allocating SRFI-4 vectors, which could lead to segfaults or buffer overflows with some sizes. For Debian 7 'Wheezy', these problems have been fixed in version 4.7.0-1+deb7u2. We recommend that you upgrade your chicken packages. NOT...