shoutbox-4-free.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-50281 Description| Value ---|--- Affected Website:| shoutbox-4-free.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

[SECURITY] Fedora 20 Update: kde-baseapps-4.14.1-2.fc20

Metapackage for Core applications of KDE 4, including: dolphin : File manager kdepasswd : Changes a UNIX password kdialog : Nice dialog boxes from shell scripts keditbookmarks : Bookmark organizer and editor kfind : File find utility konqueror : Web browser, file manager and document viewer...

[SECURITY] Fedora 20 Update: ruby-qt-4.14.1-1.fc20

This package includes ruby bindings for Qt 4...

[SECURITY] Fedora 20 Update: kdepimlibs-4.14.1-1.fc20

Personal Information Management PIM libraries for KDE 4...

[SECURITY] Fedora 20 Update: kdelibs-4.14.1-1.fc20

Libraries for KDE 4...

vBulletin 4.x Verify Email Before Registration Plugin - SQL Injection

vBulletin 4.x Verify Email Before Registration Plugin - SQL Injection Title: vBulletin Verify Email Before Registration Plugin - SQL Injection Date: September 19 2014 Version: Any vBulletin 4.. version which has the plugin installed. Plugin: http://www.vbulletin.org/forum/showthread.php?t=294164...

hengdian-world.com XSS vulnerability

Open Bug Bounty ID: OBB-49126 Description| Value ---|--- Affected Website:| hengdian-world.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-5696

The Sonic 4 Episode II LITE aka com.sega.sonic4ep2lite application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5696

The CVE concerns the Android app Sonic 4 Episode II LITE (com.sega.sonic4ep2lite), version 2.3. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Oth...

CVE-2014-5696

The Sonic 4 Episode II LITE aka com.sega.sonic4ep2lite application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Threat Outbreak Alert RuleID11421: Email Messages Distributing Malicious Software on September 4, 2014

Medium Alert ID: 35617 First Published: 2014 September 5 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11421 may contain the following files: Name |...

Updated php packages fix multiple security vulnerabilities

Updated php packages fix security vulnerabilities: Integer overflow in the cdfreadpropertyinfo function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service application crash via a craft...

Threat Outbreak Alert RuleID11399: Email Messages Distributing Malicious Software on September 4, 2014

Medium Alert ID: 35600 First Published: 2014 September 4 11:28 GMT Last Updated: 2014 September 5 11:46 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1139...

Linux/x86-64 - Bind TCP (4444/TCP) Shell (/bin/sh) + Password (hell) Shellcode (147 bytes)

Linux/x86-64 - Bind TCP 4444/TCP Shell /bin/sh + Password hell Shellcode 147 bytes. Shellcode exploit for Linuxx86-64 platform ; =================================================================== ; Password Protected Bind Shell ; Author: SLAE64-1351 Keyman ; Date: 03/09/2014 ; ; Shellcode length...

Easy Forms for vBulletin 4.X - Upload Shell Code / Remote Code Execute

Easy Forms vBuletin 4.x have suffers from a remote code execute and upload shell code. This is private exploit. You can buy it at https://0day.today...

Debian Security Advisory DSA 3015-1 (lua5.1 - security update)

A heap-based overflow vulnerability was found in the way Lua, a simple, extensible, embeddable programming language, handles varargs functions with many fixed parameters called with few arguments, leading to application crashes or, potentially, arbitrary code execution. OpenVAS Vulnerability Test...

[SECURITY] Fedora 19 Update: httpcomponents-client-4.2.5-4.fc19

HttpClient is a HTTP/1.1 compliant HTTP agent implementation based on httpcomponents HttpCore. It also provides reusable components for client-side authentication, HTTP state management, and HTTP connection management. HttpComponents Client is a successor of and replacement for Commons HttpClient...

CVE-2014-3347

Cisco IOS 15.14M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid...

wadejohnston.com XSS vulnerability

Open Bug Bounty ID: OBB-48418 Description| Value ---|--- Affected Website:| wadejohnston.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Fedora 20 : file-5.19-4.fc20 (2014-9712)

Fix for CVE-2014-3587. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...