HP OPOS CCO Drivers RCE Vulnerabilities

The HP OLE Point of Sale OPOS Common Control Objects CCO drivers installed on the remote host are prior to version 1.13.003. They are, therefore, potentially affected by unspecified vulnerabilities in the following ActiveX controls : - OPOSCashDrawer.ocx - OPOSCheckScanner.ocx - OPOSLineDisplay.o...

WEBGATE ActiveX Controls Multiple Buffer Overflows

The remote host contains one or more of the following WEBGATE ActiveX controls : - Control Center : - FileConverter.FileConverterCtrl.1 - LoginContoller.LoginControllerCtrl.1 - WESPDiscovery.WESPDiscoveryCtrl.1 - WESPPlayback.WESPPlaybackCtrl.1 - eDVR Manager : - WESPDiscovery.WESPDiscoveryCtrl.1...

Government Report Critical of FAA Security Controls

The Federal Aviation Administration has been put on notice that its information security controls are not up to par and that a risk-based program must be implemented from the ground up in order to assure the safety of its networks and passengers in the sky. A scathing Government Accounting Office...

Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability

Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1322 Video: http://www.vulnerability-lab.com/getcontent.php?id=1334 Release Date: ============= 2015-03-02...

Apple iOS 8.x - Local Controls Re Auth Bypass Vulnerability

Document Title: =============== Apple iOS 8.x - Local Controls Re Auth Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1334 View: https://www.youtube.com/watch?v=H3lefsmqO4o Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1322 Release...

Apache Tomcat 7.0.x < 7.0.54 / 8.0.x < 8.0.8 XML Parser Information Disclosure

Binary data 8921.pasl...

Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability

Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1322 Video: http://www.vulnerability-lab.com/getcontent.php?id=1334 Release Date: ============= 2015-03-02...

Apple iOS 8.x - Local Controls Re Auth Bypass Vulnerability

Document Title: =============== Apple iOS 8.x - Local Controls Re Auth Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1334 View: https://www.youtube.com/watch?v=H3lefsmqO4o Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1322 Release...

PNMsoft Sequence Kinetics Information Disclosure Vulnerability

PNMsoft Sequence Kinetics is a suite of intelligent workflow applications from PNMsoft that can organize modeling, design, and execution.Form Controls CSS is one of the control form CSS files. A security vulnerability exists in the Form Controls CSS file in PNMsoft Sequence Kinetics 7.5 and earli...

Facebook Employees can Access your Account without Password

Do you know that your Facebook account can be accessed by Facebook engineers and that too without entering your account credentials? Recent details provided by the social network giant show who can access your Facebook account and when. No doubt, Facebook and other big tech companies including...

CVE-2014-6304

The Form Controls CSS file in PNMsoft Sequence Kinetics before 7.7 allows remote attackers to obtain sensitive source-code information via unspecified vectors...

CVE-2014-6304

The Form Controls CSS file in PNMsoft Sequence Kinetics before 7.7 allows remote attackers to obtain sensitive source-code information via unspecified vectors...

CVE-2014-6304

CVE-2014-6304 affects PNMsoft Sequence Kinetics—the Form Controls CSS file—where information disclosure enables remote attackers to obtain sensitive source-code information. Public entries indicate impact for Sequence Kinetics versions up to 7.6 (CNVD reference cites 7.5 and earlier; NVD notes vu...

ownCloud Multiple Vulnerabilities -01 (Feb 2015)

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

Facebook Opens ThreatExchange Information Sharing Platform

Facebook, with its giant infrastructure and its equally wide view into Internet attacks, has built an information-sharing platform that it hopes will entice other big technology companies to join and contribute threat data and indicators of compromise. The platform, called ThreatExchange, already...

openldap -- two remote denial of service vulnerabilities

Ryan Tandy reports: With the deref overlay enabled, ldapsearch with '-E deref=member:' causes slapd to crash. Bill MacAllister discovered that certain queries cause slapd to crash while freeing operation controls. This is a 2.4.40 regression. Earlier releases are not affected...

Cisco Unified Communications Domain Manager Administrative Interface Denial of Service Vulnerability

A vulnerability in Cisco Unified Communication Domain Manager UCDM Application Software version 10 could allow an unauthenticated, remote attacker to cause the web server to become unresponsive. As a result, connections to the Cisco UCDM GUI will not be possible during the attack. The vulnerabili...

Mozilla Deploying High-capacity Tor Middle Relays

Back in November, Mozilla teamed-up with Tor Project under a new initiative called Polaris, in order to help reduce finite number of Tor connections occurring at the same time by adding high-capacity Tor middle relays to the Tor network, and now the company is ready with its first Tor Middle...

Kernel: ALSA: control: integer overflow in id.index & id.numid

An integer overflow flaw was found in the way the Linux kernel's Advanced Linux Sound Architecture ALSA implementation handled user controls. A local, privileged user could use this flaw to crash the system...

SAP ERP Dealer Portal Elevation of Privilege Vulnerability

SAP ERP is a set of integrated enterprise resource planning system based on customer/server structure and open system from SAP, Germany. The system supports custom reports, standardized processes and automated execution of business processes. A security vulnerability exists in Dealer Portal for S...