CVE-2016-1357

The password-management administration component in Cisco Policy Suite CPS 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att, and 7.5.0 allows remote attackers to bypass intended RBAC restrictions and read unspecified data via unknown vectors, aka Bug ID CSCut85211...

[SECURITY] Fedora 23 Update: perl-5.22.1-351.fc23

Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

USASearch - Moderately Critical - Access Bypass - SA-CONTRIB-2016-010

This module indexes public content using USASearch, a program of the General Services Administration’s Office of Citizen Services and Information Technology OCSIT, which offers free search services to any federal, state, local, tribal, or territorial government agency that can be used to search o...

White House Wants Wassenaar Renegotiation

The White House, lawmakers said yesterday, wants to renegotiate the divisive U.S. implementation of the Wassenaar Arrangement rules as they relate to intrusion software. A draft of the rules was pulled off the table in July by the Commerce Department’s Bureau of Industry and Security BIS followin...

Cisco Spark REST Interface Denial of Service Vulnerability

Cisco Spark is a collaboration services solution. A security vulnerability in the REST interface of Cisco Spark allows remote attackers to perform a denial of service by accessing the administration page...

ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities

Exploit for windows platform in category web applications ================================================================ ManageEngine Firewall Analyzer 8.5– Privilege Escalation Vulnerability ================================================================ Description : Vulnerability Type :...

389 security update

CentOS Errata and Security Advisory CESA-2016:0204 Updated 389-ds-base packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System...

Apache Solr webapp/web/js/scripts/schema-browser.js cross-site scripting vulnerability

Apache Solr is an enterprise-ready, Lucene-based search server. A cross-site scripting vulnerability exists in webapp/web/js/scripts/schema-browser.js in the Admin UI of Apache Solr versions prior to 5.3. A remote attacker can inject arbitrary web script or HTML via a constructed schema-browse UR...

Advantech WebAccess datacore Service datacore.exe strcpy Heap-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x7920 IOCTL in the Kernel subsystem. A heap-based buffer...

Netgear N300 Wireless Router Authentication Bypass Vulnerability

Netgear N300 wireless router is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 23 Update: phpMyAdmin-4.5.4.1-1.fc23

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

[SECURITY] Fedora 22 Update: phpMyAdmin-4.5.4-1.fc22

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

Kangle虚拟主机本地文件包含漏洞

测试环境：kangle-3.3.9.msi，ep-2.6.4.exe（官方4-18日更新），windows XP 首先安装kangle server，然后安装easypanel，安装成功后访问http://127.0.0.1:3312/，会自动跳转到http://127.0.0.1:3312/vhost/?c=session&a=loginForm。 然后随便输入用户名密码登陆，如图发送的请求： 然后修改请求url中的参数c的值，将session改为： C=../../../../../../../../../../../windows/system.ini%00...

Netgear WNR1000v4 - Authentication Bypass

''' Exploit Title: NetgearWNR1000v4AuthBypass Google Dork: - Date: 06.10.2015 Exploit Author: Daniel Haake Vendor Homepage: http://www.netgear.com/ Software Link: http://downloadcenter.netgear.com/en/product/WNR1000v4 Version: N300 router firmware versions 1.1.0.24 - 1.1.0.31 Tested on: Can be...

WordPress Booking Calendar Contact Form Plugin 1.1.24 - Multiple Vulnerabilities

This plugin is prone to persistent XSS vulnerabilities that appear in the administration page. Solution Upgrade the plugin...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Universal Work Queue Work Provider Administration Component (CNVD-2016-00600)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Universal Work Queue Work Provider Administration component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability to submit...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Advanced Collections Administration Component (CNVD-2016-00619)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Advanced Collections Administration component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability to submit special requests t...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Interaction Blending Blending Administration Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Interaction Blending Blending Administration component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability to submit special...

Unspecified Vulnerability in Oracle iLearning Learner Administration Component

Oracle iLearning is an enterprise-class learning management system. An unspecified security vulnerability exists in the Oracle iLearning Learner Administration component, which could be exploited by remote attackers to modify data...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Universal Work Queue Work Provider Administration Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Universal Work Queue Work Provider Administration component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability to submit...