Schneider Electric ProClima Command Injection Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning command injection vulnerabilities in Schneider Electric’s ProClima software package. These vulnerabilities were reported to ZDI by security researchers Ariele Caltabiano, Andrea Micalizzi, and Brian Gorenc...

SIFY Cloud Service Detection

Binary data 8513.prm...

SuSE 10 Security Update : libxml2 (ZYPP Patch Number 8513)

libxml2 has been updated to fix entity expansion problems : - Internal entity expansion within XML was not bounded, leading to simple small XML files being able to cause 'out of memory' denial of service conditions. CVE-2013-0338 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...