CVE-2016-6257

The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system b...

Attributing Advanced Attacks Remains Challenge For Researchers

Amid the connections being made between the Russian government and the attack on the Democratic National Committee DNC, researchers on Tuesday reminded us of the challenges security experts have in correctly attributing advanced attacks. In a wide-ranging Reddit AMA, members of Kaspersky Lab’s...

[SECURITY] Fedora 23 Update: kf5-kconfig-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with advanced configuration system made of two parts: KConfigCore and KConfigGui...

[SECURITY] Fedora 23 Update: kf5-ktextwidgets-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 23 Update: kf5-ktexteditor-5.24.0-1.fc23

KTextEditor provides a powerful text editor component that you can embed in your application, either as a KPart or using the KF5::TextEditor library if you need more control. The text editor component contains many useful features, from syntax highlighting and automatic indentation to advanced...

[SECURITY] Fedora 23 Update: kf5-threadweaver-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon for advanced thread management...

[SECURITY] Fedora 23 Update: kf5-kcompletion-5.24.0-1.fc23

KCompletion provides widgets with advanced completion support as well as a lower-level completion class which can be used with your own widgets...

[SECURITY] Fedora 24 Update: kf5-kconfig-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with advanced configuration system made of two parts: KConfigCore and KConfigGui...

[SECURITY] Fedora 24 Update: kf5-ktextwidgets-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 24 Update: kf5-threadweaver-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon for advanced thread management...

[SECURITY] Fedora 24 Update: kf5-kcompletion-5.24.0-1.fc24

KCompletion provides widgets with advanced completion support as well as a lower-level completion class which can be used with your own widgets...

WordPress WP Advanced Comment Plugin HTML Injection Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation.WP Advanced Comment is one of the Ajax-based comment plugins. An HTML injection vulnerability exists in the WordPress WP Advanced Comment plugin. An attacker can exploit this vulnerabilit...

CVE-2016-3546

Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Report JSPs...

CVE-2016-3532

Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is from the July 2016 CP...

Unspecified Vulnerability in Oracle E-Business Suite Advanced Collections

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. Oracle E-Business Suite versions 12.1.1, 12.1.2, and 12.1.3 contain a security vulnerability in the Advanced Collections component that can be exploited by remote attackers to compromise confidentiality,...

Unspecified Vulnerability in Oracle E-Business Suite Advanced Inbound Telephony

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. A security vulnerability exists in Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3 in the Advanced Inbound Telephony component, which can be exploited by remote attackers to compromise...

Wowza Streaming Engine 4.5.0 Remote Privilege Escalation

i? Wowza Streaming Engine 4.5.0 Remote Privilege Escalation Exploit Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza Streaming Engine is robust, customizable, and scalable server software that powers reliabl...

Wowza Streaming Engine 4.5.0 - Cross-Site Request Forgery (Add Advanced Admin)

Wowza Streaming Engine 4.5.0 - Cross-Site Request Forgery Add Advanced Admin input type...

Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation

input type="hidden" name="action" value="quickEd...

Oracle E-Business Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2016 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Wireless Framework subcomponent within the CRM Technical Foundation component that...