Fedora 18 : wireshark-1.10.2-4.fc18 (2013-17635)

dumpcap now stores temporary capture files in /var/tmp - Convert automake/pkgconfig files into patches better upstream integration - Restored category in the .desktop file - Install another one necessary header file - framedatasequence.h - Add basic OpenFlow dissector - Ver. 1.10.2 - Ver. 1.10.1...

CVE-2013-2816

The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service reboot or link outage via crafted input over a serial line...

Design/Logic Flaw

The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service reboot or link outage via a crafted DNP3 TCP packet...

Design/Logic Flaw

The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service reboot or link outage via crafted input over a serial line...

CVE-2013-2816

The CVE-2013-2816 entry concerns Cooper Power Systems SMP Gateway DNP3 components (SMP 16 Gateway, SMP 4 Gateway, SMP 4/DP Gateway). The vulnerability stems from improper input validation in the DNP3 component, enabling reboot or link outage. Two attack surfaces are noted: IP-connected (remote) v...

CVE-2013-2813

The CVE-2013-2813 issue affects Cooper Power Systems SMP Gateway family (SMP 16 Gateway, SMP 4 Gateway, and SMP 4/DP Gateway). The DNP3 component improperly validates input, allowing remote attackers to trigger a reboot or communication link outage via a specially crafted DNP3 TCP packet. The vul...

CVE-2013-2813

The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service reboot or link outage via a crafted DNP3 TCP packet...

iLO 3 < 1.65 / iLO 4 < 1.32 Multiple Vulnerabilities

Description not available %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid71494; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/19"; scriptcveid"CVE-2013-4842",...

IBM WebSphere Service Registry and Repository 7.5 < 7.5.0 FP4 Script Injection

The version of IBM WebSphere Service Registry and Repository is 7.5 earlier than Fix Pack 4. Such versions are potentially vulnerable to a script injection attack in the WebSphere Service Registry and Repository Widgets. By tricking an authenticated user into opening a specially crafted link, a...

CVE-2013-6416

The CVE-2013-6416 entry concerns Ruby on Rails 4.x prior to 4.0.2, specifically a cross-site scripting (XSS) flaw in the simple_format helper within action_view/helpers/text_helper.rb. The vulnerability allows remote attackers to inject arbitrary script or HTML via a crafted HTML attribute, impac...

Threat Outbreak Alert: Email Messages with Malicious Attachments on December 4, 2013

Medium Alert ID: 32010 First Published: 2013 December 4 16:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body and documents attached for the recipient. The email message attempts to convince the recipient to open the...

DSA-2808-1 openjpeg - several

Bulletin has no description...

[Hack PS4] PS4 Jailbreaking (with OrbisOS 0day)

EXPLOIT DETAILS OS: Orbis Console: PlayStation 4 Type: Privilege Escalation/Buffer Overflow allows to run assigned code Created on: 25 November 2013 AUTHOR Name: x-s4nd3r URL: http://twitter.com/xs4nd3r feel free to get him v& FILES: PS4 DevKit: https://depositfiles.com/files/deitivkle Jailbreak...

Google Nexus phone vulnerable to SMS-based DOS attack

Google's Nexus Smartphones are vulnerable to SMS-based DOS attack, where an attacker can force it to restart, freeze, or lose network connection by sending a large number of special SMS messages to them. The vulnerability, discovered by Bogdan Alecu, a system administrator at Dutch IT services...

DSA-2806-1 nbd - privilege escalation

Bulletin has no description...

Okular: Arbitrary code execution

Background Okular is a universal document viewer based on KPDF for KDE 4. Description Okular contains a heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp. Impact A remote attacker could entice a user ...

Fedora 18 : chicken-4.8.0.4-4.fc18 (2013-17912)

Fix for CVE-2013-4385. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Destoon最新版本20131010补丁后，全版本继续注入

简要描述： Destoon最新版本20131010补丁后，全版本继续注入 详细说明： 问题出在api/js.php这个漏洞，这个星期工作忙，结果别人提交了，官方补丁都出来了。 下载补丁，发现官方的修复比较马虎，没有理解漏洞的本质，分分钟绕过再次注入。 建议官方好好思考一下这个漏洞产生的根本原因。 漏洞证明： stripsql过滤了union这个字符串，但是实际上是可以绕过的。 由于需要伪造referer，所以用php写的脚本进行漏洞利用，需要根据实际情况修改里面的路径。 POC里面host参数为域名，本机测试为localhost，ver参数为版本，里面写了3,4,5三个版本的利用代码。...

CVE-2013-4842

Cross-site scripting XSS vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4842

HP Integrated Lights-Out (iLO4) firmware prior to 1.32 is affected by CVE-2013-4842, a cross-site scripting (XSS) vulnerability that can allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue affects HP iLO4 web interface and is identified in multiple vul...