Solaris 10 (x86) : 147695-82

JavaSE 7x86: update 80 patch equivalent to JDK 7u80, 64bit. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 147695-52

JavaSE 7x86: update 51 patch equivalent to JDK 7u51, 64bit. Date this patch was last updated by Sun : Jan/14/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 137204-33

Messaging Server 64bit 7.0.5.33.0: core patch. Date this patch was last updated by Sun : Sep/15/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (sparc) : 152097-21

JavaSE 7: update 121 patch equivalent to JDK 7u121, 64bit. Date this patch was last updated by Sun : Oct/17/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 152079-51

JavaSE 6x86: update 151 patch equivalent to JDK 6u151, 64bit. Date this patch was last updated by Sun : Apr/17/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 152100-31

JavaSE 8: update 131 patch equivalent to JDK 8u131, 64bit. Date this patch was last updated by Sun : Apr/17/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 152097-71

JavaSE 7: update 171 patch equivalent to JDK 7u171, 64bit. Date this patch was last updated by Sun : Jan/16/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid107769;...

Solaris 10 (x86) : 151010-40

JavaSE 8x86: update 40 patch equivalent to JDK 8u40, 64bit. Date this patch was last updated by Sun : Mar/03/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 152101-52

JavaSE 8x86: update 152 patch equivalent to JDK 8u152, 64bit. Date this patch was last updated by Sun : Oct/16/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 151009-20

JavaSE 8: update 20 patch equivalent to JDK 8u20, 64bit. Date this patch was last updated by Sun : Aug/16/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 137205-37

Messaging Server 64bit 7.0.5.37.0x86: core patch. Date this patch was last updated by Sun : Feb/15/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Solaris 10 (x86) : 152101-12

JavaSE 8x86: update 112 patch equivalent to JDK 8u112, 64bit. Date this patch was last updated by Sun : Oct/17/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 152100-12

JavaSE 8: update 112 patch equivalent to JDK 8u112, 64bit. Date this patch was last updated by Sun : Oct/17/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 147693-91

JavaSE 7: update 91 patch equivalent to JDK 7u91, 64bit. Date this patch was last updated by Sun : Oct/19/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 151010-60

JavaSE 8x86: update 60 patch equivalent to JDK 8u60, 64bit. Date this patch was last updated by Sun : Aug/17/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Transmission - Integer Overflows Parsing Torrent Files

Transmission - Integer Overflows Parsing Torrent Files I took a look at torrent file parsing in libtransmission, there are a few integer overflows because the trnew/trnew0 allocation wrappers don't handle overflow. define trnewstructtype, nstructs \ structtype trmalloc sizeof structtype...

System Shield 5.0.0.136 - Privilege Escalation

System Shield 5.0.0.136 - Privilege Escalation / Exploit Title - System Shield AntiVirus & AntiSpyware Arbitrary Write Privilege Escalation Date - 29th January 2018 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.iolo.com/ Tested Version - 5.0.0.136 Driver Version - 5.4.11.1 ...

System Shield 5.0.0.136 - Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Exploit Title - System Shield AntiVirus & AntiSpyware Arbitrary Write Privilege Escalation Date - 29th January 2018 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.iolo.com/ Tested Version - 5.0.0.136 Driver Version -...

CVE-2018-6393

FreePBX 10.13.66-32bit and 14.0.1.24 SNG7-PBX-64bit-1712-2 allow post-authentication SQL injection via the order parameter. NOTE: the vendor disputes this issue because it is intentional that a user can "directly modify SQL tables ... or run shell scripts ... once ... logged in to the...

CVE-2018-6393

The CVE-2018-6393 issue affects FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2). It enables post-authentication SQL injection via the order parameter in the administration interface. The vendor notes it is intentional that a user with access can modify SQL tables or execute shell scr...