IPCop 2.1.4 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: IPCop = 2.1.4 XSS to CSRF to Remote Command Execution Date: 21/12/2014 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.ipcop.org - www.ipcop.org/download.php Version: 2.1.4 Category: Remote Command Execution Google dork: Tested on: IPCop distribution IPCop...

SmoothWall 3.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: SmoothWall 3.1 Multiple vulnerabilities Date: 21/12/2014 Author: Yann CAM @ Synetis Vendor or Software Link: www.smoothwall.org - www.smoothwall.org/download/ Version: 3.1 Category: CSRF password reset & XSS persistent Google dork: Tested on: Smoothwall Linux distribution Smoothwal...

DSA-3106-1 jasper - security update

Bulletin has no description...

Threat Outbreak Alert RuleID12929: Email Messages Distributing Malicious Software on December 18, 2014

Medium Alert ID: 36824 First Published: 2014 December 19 12:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12929 may contain the following files: Name |...

Debian: Security Advisory (DSA-3107-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 113-1] bsd-mailx security update

Package : bsd-mailx Version : 8.1.2-0.20100314cvs-1+deb6u1 CVE ID : CVE-2014-7844 It was discovered that bsd-mailx, an implementation of the "mail" command, had an undocumented feature which treats syntactically valid email addresses as shell commands to execute. Users who need this feature can...

CoolReaper Backdoor Found On CoolPad Android Mobile Devices

A popular Android smartphone sold primarily in China and Taiwan but also available worldwide, contains a backdoor from the manufacturer that is being used to push pop-up advertisements and install apps without users’ consent. The Coolpad devices, however, are ripe for much more malicious abuse,...

DLA-114-1 heirloom-mailx - security update

Bulletin has no description...

DLA-113-1 bsd-mailx - security update

Bulletin has no description...

[SECURITY] [DSA 3104-1] bsd-mailx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3104-1 [email protected] http://www.debian.org/security/ Florian Weimer December 16, 2014 http://www.debian.org/security/faq -...

DSA-3105-1 heirloom-mailx - security update

Bulletin has no description...

DSA-3104-1 bsd-mailx - security update

Bulletin has no description...

Threat Outbreak Alert RuleID12841: Email Messages Distributing Malicious Software on December 14, 2014

Medium Alert ID: 36751 First Published: 2014 December 15 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12841 may contain the following files: Name |...

Threat Outbreak Alert RuleID12831: Email Messages Distributing Malicious Software on December 12, 2014

Medium Alert ID: 36744 First Published: 2014 December 15 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12831 may contain the following files: Name |...

Threat Outbreak Alert RuleID12858: Email Messages Distributing Malicious Software on December 15, 2014

Medium Alert ID: 36760 First Published: 2014 December 15 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12858 may contain the following files: Name |...

[SECURITY] Fedora 20 Update: erlang-R16B-03.10.fc20

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

[SECURITY] [DSA 3103-1] libyaml-libyaml-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3103-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 13, 2014 http://www.debian.org/security/faq -...

DSA-3101-1 c-icap - security update

Bulletin has no description...

Threat Outbreak Alert RuleID12822: Email Messages Distributing Malicious Software on December 12, 2014

Medium Alert ID: 36736 First Published: 2014 December 12 13:48 GMT Last Updated: 2014 December 15 13:23 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1282...

Debian: Security Advisory (DSA-3102-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...