7085 matches found
McAfee ePolicy Orchestrator OpenSSL Information Disclosure (SB10071) (Heartbleed)
The remote host is running a version of McAfee ePolicy Orchestrator that is affected by an information disclosure due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory from the...
McAfee Web Gateway OpenSSL Information Disclosure (SB10071) (Heartbleed)
The remote host is running a version of McAfee Web Gateway MWG that is affected by an information disclosure vulnerability due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory...
KLA10366 OSI vulnerability in Titan FTP Server
A directory traversal vulnerability was found in Titan FTP Server. By exploiting this vulnerability malicious users can list usernames or home folder. This vulnerability can be exploited remotely via specially designed parameters. Original advisories Changelog Exploitation Public exploits exist f...
Siemens Update on Heartbleed Patches in ICS, SCADA
Industrial control equipment manufacturer Siemens has produced a security update that mitigates the OpenSSL Heartbleed vulnerability in its eLAN systems and now its WinCC OA supervisory control and data acquisition SCADA software as well. The company is continuing to work on patches to resolve th...
CVE-2014-0984
creationtimestamp| type| source ---|---|--- 2014-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32919...
Certificate Revocation Slow on Heartbleed Web Servers
The rush to revoke and replace digital certificates on Heartbleed-vulnerable Web servers seems to be no rush at all. Internet research and security services firm Netcraft reports today that of the more than 500,000 servers it knows of that are running vulnerable versions of OpenSSL, only 80,000...
PhpMyAdmin exploits concludes With Metasploit-vulnerability warning-the black bar safety net
A: affects versions: 3.5. x 3.5.8.1 and 4.0.0 4.0.0-rc3 Overview: PhpMyAdmin presence of a PREGREPLACEEVAL vulnerability Use module: exploit/multi/http/phpmyadminpregreplace CVE: CVE-2 0 1 3-3 2 3 8 II: effects version: phpMyAdmin v3. 5. 2. 2 Overview: PhpMyAdmin存在serversync.php Backdoor...
Obama Lets NSA Use Zero-Day Exploits by labeling it as 'National Security Need'
On Saturday, the Senior Administration Officials cast light on the subject of Internet Security and said President Obama has clearly decided that whenever the U.S. Intelligence agency like NSA discovers major vulnerabilities, in most of the situations the agency should reveal them rather than...
Oracle Linux 6 : samba4 (ELSA-2014-0383)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0383 advisory. - resolves: 1073913 - Fix CVE-2012-6150. - resolves: 1073913 - Fix CVE-2013-4496. Tenable has extracted the preceding description block directly from t...
Fedora 20 : openssl-1.0.1e-37.fc20.1 (2014-4879)
pull in upstream patch for CVE-2014-0160 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory 2014-4879. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73429;...
Canon PIXMA Printer Administration Authentication Bypass
The remote printer contains a flaw that could allow a remote attacker to obtain sensitive information. The HTTP admin interface does not require credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73375;...
Pompem - Exploit Finder
Pompem is an open source tool, which is designed to automate the search for exploits in major databases. Developed in Python, has a system of advanced search, thus facilitating the work of pentesters and ethical hackers. In its current version, performs searches in databases: Exploit-db, 1337day,...
Malware Attacks Against Linux 2.6 Websites
The risks presented by unsupported operating systems are being called out in a large-scale attack on hundreds of websites. Hackers have hit web servers running a version of the Linux 2.6 kernel released seven years ago. The result is a multistage attack where compromised websites are spiked with...
Firefox 28 Patches Four Pwn2Own Zero-Day Vulnerabilities
The Firefox web browser took a beating during last week’s Pwn2Own contest with researchers bringing four zero-day vulnerabilities and exploits to the table, walking away with a collective $200,000 in prize money in the process. Yesterday, Mozilla capped all four bugs among 18 security advisories...
World’s First Google Glass Spyware app unveiled
In the mob of Smart Devices, after Smartphones... Google glass would definitely be the next must-have device. It’s non-other than a small computer you wear like eyeglasses allows you to surf the Web, email, text, take photos, live videos and more, -- all hands free. Google Glasses are yet in very...
Exploits for Two-Year-Old PHP Security Vulnerability Found
Close to two years ago, a serious vulnerability in PHP was accidentally disclosed after it was discovered months prior during a hacking contest. A patch was released in relatively short order, and one would assume that given PHP’s prevalence as a web development framework, the fix would have been...
Oracle Linux 5 : samba (ELSA-2014-0305)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0305 advisory. - Security Release, fixes CVE-2013-0213 and CVE-2013-4124 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Browser Bugs, BIOS and Brokers dominate CanSecWest, Pwn2Own
Browsers, brokers and BIOS: you could safely call that triumvirate the past, present and future of security, but you’d be wrong. If last week’s CanSecWest conference, and Pwn2Own and Pwnium contests are indeed a point-in-time snapshot of the technical side of information security, then after last...
Google Patches Four Pwn2Own Bugs in Chrome 33
Now that the dust has settled after the Pwn2Own contest, the browser manufacturers are beginning to roll out patches for the vulnerabilities exploited by contestants. Google on Monday released fixes for a number of bugs in Chrome discovered and exploited during Pwn2Own, releasing new versions of...