Security Advisory - Buffer Overflow Vulnerability in Huawei USG Products

The Authentication, Authorization and Accounting AAA module in the USG products has a buffer overflow vulnerability. A remote attacker can send crafted Enterprise Application Platform EAP packets to the USG products through a Remote Authentication Dial In User Service RADIUS server which has...

Xero Accounting Software - Exported components, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Xero Accounting Software published at the 'play' market has multiple vulnerabilities...

DMA Radius Manager 4.1.5 Cross Site Request Forgery

tanks: Dr Ms Jk - n1arash - Milad Hacking - malahsky...

Mimikittenz - Post-Exploitation Powershell Tool for Extracting Juicy info from Memory

mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes using regex patterns including but no...

Post Exploitation Powershell Tool: mimikittenz

Post Exploitation Powershell Tool mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes usi...

Car costs accounting - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Car costs accounting published at the 'play' market has multiple vulnerabilities...

Arbitrary File Upload Vulnerability in Cost Accounting Practical Training Teaching Platform of Xiamen NetZhong.com Software Co.

Cost accounting practical training teaching platform of Xiamen NetZone Software Co. There is a file upload vulnerability in the cost accounting training platform that can be exploited by an attacker to upload arbitrary files and gain control of the site...

[SECURITY] Fedora 24 Update: pulp-2.8.3-1.fc24

Pulp provides replication, access, and accounting for software repositories...

USN-2947-2 linux-lts-wily vulnerabilities

Ralf Spenneberg discovered that the usbvision driver in the Linux kernel did not properly validate the interfaces and endpoints reported by the device. An attacker with physical access could cause a denial of service system crash. CVE-2015-7833 Venkatesh Pottem discovered a use-after-free...

Small Business Accounting PRO - Apache license, BSD license, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Small Business Accounting PRO published at the 'play' market has multiple vulnerabilities...

kernel security, bug fix, and enhancement update

2.6.32-573.22.1 - mm always decrement anonvma degree when the vma list is empty Jerome Marchand 1318364 1309898 2.6.32-573.21.1 - fs pipe: fix offset and len mismatch on pipeiovcopytouser failure Seth Jennings 1310148 1302223 CVE-2016-0774 - fs gfs2: Add missing else in transaddmeta/data Robert S...

ventureline.com XSS vulnerability

Vulnerable URL: https://www.ventureline.com/accounting-glossary/?livesearchinput==Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 810081 Google Pagerank| 4 VIP website status...

VMware ESX / ESXi Descheduled Time Accounting DoS (VMSA-2009-0007) (remote check)

The remote ESX / ESXi host is missing a security-related patch. It is, therefore, affected by an unspecified flaw in the Descheduled Time Accounting driver that allows a guest Windows user to cause a denial of service. Note that this issue can be exploited only if the feature is installed and the...

Huawei Switches Permission Control Privilege Escalation (HWPSIRT-2015-08048)

The remote Huawei switch is affected by a privilege escalation vulnerability related to improper interaction of user permissions when Authentication, Authorization, and Accounting AAA are enabled for permission control on the switch. An authenticated, remote attacker can exploit this to access th...

JShielder - LAMP/LEMP Secure Deployment

JSHielder is an Open Source tool developed to help SysAdmin and developers secure there Linux Servers in which they will be deploying any web application. This tool automates the process of installing all the necessary packages to host a web application and Hardening a Linux server with little...

Lambeth Technologies Accounting Management System suffers from java deserialization vulnerability

Lambeth Information Technology Co., Ltd. is a large-scale high-tech enterprise with information technology and environmental protection technology as its core business direction. Lambeth Technology's accounting management system has a java deserialization vulnerability. Using related tools, an...

Lambeth IT Accounting Management System suffers from java deserialization remote command execution vulnerability

Lambeth Technology Accounting Management System is a set of accounting management and external service informatization application system developed by Lambeth Information Technology Co. A Java deserialization remote command execution vulnerability exists in the Lambeth Technologies Accounting...

CVE-2006-4181

Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors...

JVN#02671769: phpRechnung vulnerable to SQL injection

phpRechnung is a web-based accounting software. list.php of phpRechnung contains an SQL injection CWE-89 vulnerability. Impact An authenticated attacker may obtain or alter information stored in the database. Solution Update the Software Update to the latest version according to the information...

Threat Outbreak Alert RuleID17227: Email Messages Distributing Malicious Software on August 10, 2015

Medium Alert ID: 40361 First Published: 2015 August 10 14:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17227 may contain the following files: Name |...