Xamarin Studio for Mac 6.2.1 (build 3) 6.3 (build 863) - Local Privilege Escalation

Xamarin Studio for Mac 6.2.1 build 3 6.3 build 863 - Local Privilege Escalation Source: https://www.securify.nl/advisory/SFY20170403/xamarin-studio-for-mac-api-documentation-update-affected-by-local-privilege-escalation.html Abstract Xamarin Studio is an Integrated Development Environment IDE use...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0028

An update of linux packages for PhotonOS has been released...

Oracle Linux 7 : openssh (ELSA-2017-2029)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2029 advisory. 7.4p1-11 + 0.10.3-1 - Compiler warnings 1341754 7.4p1-10 + 0.10.3-1 - Add missing messages in FIPS mode 1341754 7.4p1-9 + 0.10.3-1 - Allow harmless...

CVE-2017-3635

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/C. Supported versions that are affected are 6.1.10 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...

WS-Attacker v1.8 - Modular Framework For Web Services Penetration Testing

WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum http://nds.rub.de/ and the Hackmanit GmbH http://hackmanit.de/ . The basic idea behind WS-Attacker is to provide a functionality to load WSDL...

CVE-2015-5059

The "Project Documentation" feature in MantisBT 1.2.19 and earlier, when the threshold to access files $gviewprojdocthreshold is set to ANYBODY, allows remote authenticated users to download attachments linked to arbitrary private projects via a file id number in the fileid parameter to...

CVE-2015-5059

The "Project Documentation" feature in MantisBT 1.2.19 and earlier, when the threshold to access files $gviewprojdocthreshold is set to ANYBODY, allows remote authenticated users to download attachments linked to arbitrary private projects via a file id number in the fileid parameter to...

CVE-2015-5059

The "Project Documentation" feature in MantisBT 1.2.19 and earlier, when the threshold to access files $gviewprojdocthreshold is set to ANYBODY, allows remote authenticated users to download attachments linked to arbitrary private projects via a file id number in the fileid parameter to...

CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

Artifex Ghostscript GhostXPS Denial of Service Vulnerability (CNVD-2017-22388)

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. A security vulnerability exists in the 'InsMDRP' function of the base/ttinterp.c file in Artifex Ghostscript...

Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22387)

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. Artifex Ghostscript A security vulnerability exists in the 'gxttfReaderRead' function of the base/gxttfb.c file i...

Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22392)

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. A security vulnerability exists in the 'InsIP' function of the base/ttinterp.c file in Artifex Ghostscript GhostX...

CVE-2017-7018

creationtimestamp| type| source ---|---|--- 2017-07-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42373...

CVE-2017-7039

creationtimestamp| type| source ---|---|--- 2017-07-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42362...

V1D0m: Enumerate Subdomains via Virustotal!

PenTestIT RSS Feed VirusTotal for long has provided a free online file and URL scanning service. Infact, I think it is THE site that started this kind of service more than 10 years ago. Wikipedia mentions that it was started in the year 2004! It also offers a "search" service which helps us to fi...

CVE-2017-3635

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/C. Supported versions that are affected are 6.1.10 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...

CVE-2017-6182

creationtimestamp| type| source ---|---|--- 2017-07-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42332 2026-06-26 10:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp6p4qaa6t2n...

CVE-2017-11144

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in...

Fedora 26 : php-pear-CAS (2017-2f3096ba16)

Changes in version 1.3.5 - Security Fixes : - Fix possible authentication bypass in validateCAS20 228 Gregory Boddin - Bug Fixes : - Fix file permissions non-executable 177 Remi Collet - Fixed translations Greek and Japanese 192 ikari7789 - Fix errors under phpdbg 204 MasonM - Fix logout...

NetScaler SD-WAN 410-SE Stuck in Rescue Mode When Factory Reset Using NMI Button

NetScaler SD-WAN 410-SE stuck in rescue mode when it is factory reset using NMI reset button. User does not see the outputs mentioned in the reset Citrix Documentation. The following is a screenshot of recovery image landing in rescue environment: You will then see the Choose Box ID option:...