Siemens SIMATIC Communication Processor Vulnerability (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC Communication Processor Vulnerability: Authentication Bypass Issues 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-15-335-03...

gerflor.de XSS vulnerability

Vulnerable URL: http://www.gerflor.de/suche.html?search=%22--%3E+%3C%2Fscript%3E%3Csvg%2Fonload%3D%27%3Balert%28%2FXSSPOSED%2F%29%3B%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Raspberry Pi Zero — The $5 Tiny Computer is Here

Get ready for a ThanksGiving celebration from the Raspberry Pi Foundation. Raspberry Pi, the charitable foundation behind the United Kingdom's best-selling computer, has just unveiled its latest wonder – the Raspberry Pi Zero. Raspberry Pi Zero is a programmable computer that costs just $5 or £4,...

Fedora 21 : sblim-sfcb-1.4.8-5.fc21 (2015-14200)

Fix possible NULL pointer dereference CVE-2015-5185 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

vlaamsbouwmeester.be XSS vulnerability

Vulnerable URL: http://www.vlaamsbouwmeester.be/nl/zoeken?zoekterm=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6238836...

CVE-2015-7808

The vBApiHook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments...

Design/Logic Flaw

The vBApiHook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments...

Mageia: Security Advisory (MGASA-2015-0450)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

vBulletin 5.x - Remote Code Execution

Title: Vbulletin 5.x - Remote Code Execution Exploit + Product: vbulletin + Vendor: http://vbulletin.com + Vulnerable Versions: Vbulletin 5.x Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es...

Mageia: Security Advisory (MGASA-2015-0453)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0451)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Phusion Passenger Server allows to overwrite headers in some cases

It is possible in some cases, for clients to overwrite headers set by the server, resulting in a medium level security issue. Passenger 5 uses an SCGI-inspired format to pass headers to Ruby/Python applications, while Passenger 4 uses an SCGI-inspired format to pass headers to all applications...

indulgy.com XSS vulnerability

Vulnerable URL: http://indulgy.com/post/r4QDHbGpG3/xssposed Details: Description| Value ---|--- Patched:| Yes, at 12.12.2015 Latest check for patch:| 12.12.2015 21:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9006 Google Pagerank| 5 VIP website status:| Ye...

indulgy.com XSS vulnerability

Vulnerable URL: http://indulgy.com/search/lol%22%20onmouseover=%22alert%28'XSSPOSED'%29%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9006 Google Pagerank| 5 VIP website status...

cdiscount.com XSS vulnerability

Vulnerable URL: http://www.cdiscount.com/sr-10/toto%22;alert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29;a=%22.htmlhis Details: Description| Value ---|--- Patched:| Yes, at 11.12.2015 Latest check for patch:| 11.12.2015 10:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Nessus 5.x < 5.2.12 / 6.x < 6.4 Multiple OpenSSL Vulnerabilities

According to its version, the installation of Tenable Nessus running on the remote host is version 5.x prior to 5.2.12 or 6.x prior to 6.4. It is, therefore, affected by multiple denial of service vulnerabilities in the bundled OpenSSL component : - A denial of service vulnerability exists when...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2015-2086)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2086 advisory. 1:1.6.0.35-1.13.9.4.0.1.el511 - Add oracle-enterprise.patch 1:1.6.0.37-1.13.9.4 - Update with new IcedTea & b37 tarballs, including fix for...

Oracle: Security Advisory (ELSA-2015-2086)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lyricsmania.com XSS vulnerability

Vulnerable URL: http://www.lyricsmania.com/searchnew.php?k=%3Cscript%3Ealert%281%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13595 Google Pagerank| 5 VIP websi...

Oracle: Security Advisory (ELSA-2015-2065)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...