Oracle Linux 5 : tar (ELSA-2010-0141)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2010-0141 advisory. - CVE-2007-4476 - fix stack crashing in safernamesuffix Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : jasper (ELSA-2011-1807)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1807 advisory. 1.900.1-15.1 - CERT VU887409: heap buffer overflow flaws lead to arbitrary code execution 749149 Tenable has extracted the preceding description block...

Oracle Linux 5 : Critical: / samba (ELSA-2007-0354)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0354 advisory. 3.0.10-1.4E.12.2 - Security fixes for CVE-2007-2446 CVE-2007-2447 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 / 6 : php (ELSA-2012-0546)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0546 advisory. - correct detection of = in CVE-2012-1823 fix 818607 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 : java-1.6.0-openjdk (ELSA-2013-0605)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0605 advisory. 1:1.6.0.0-1.57.1.11.9 - Updated to icedtea6 1.11.9 - Resolves: rhbz917179 Tenable has extracted the preceding description block directly from the Oracl...

TrueType Font Exploits Gateway to Kernel Attacks

Font-parsing vulnerabilities weren’t part of the security consciousness much until the discovery of Duqu at the end of 2011. The spy malware hooked into the Windows kernel through bugs in the TrueType font file parsing engine, and not only breathed new life into the concept of cyber espionage, bu...

WordPress Plugin miniBB - SQL Injection / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61116/info miniBB is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data...

Microsoft .NET Framework CVE-2013-3132 Remote Privilege Escalation Vulnerability

Description Microsoft .NET Framework is prone to a remote privilege-escalation vulnerability. An attacker can exploit this vulnerability to bypass certain Code Access Security CAS restrictions and gain elevated privileges. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya...

Solaris 9 (sparc) : 143048-02

Sun Cluster 3.1: HA-Oracle E-business suite Patch for Solaris 9. Date this patch was last updated by Sun : Feb/03/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2013-4694

creationtimestamp| type| source ---|---|--- 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26558 2013-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27874...

CVE-2014-2671

creationtimestamp| type| source ---|---|--- 2013-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26517 2014-03-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32478 2014-03-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32477 2014-03-24...

Hack Windows 8.1 to earn $100,000 bounty from Microsoft

If you don't know yet, Microsoft is offerings up to $100,000 in exchange for finding vulnerabilities and exploits in the upcoming Windows 8.1 Preview which is expected to launch on June 26, the same time as the Microsoft Build Developer Conference. Qualifying submissions with accompanying defensi...

Hack Windows 8.1 to earn $100,000 bounty from Microsoft

If you don’t know yet, Microsoft is offerings up to $100,000 in exchange for finding vulnerabilities and exploits in the upcoming Windows 8.1 Preview which is expected to launch on June 26, the same time as the Microsoft Build Developer Conference. Qualifying submissions with accompanying defensi...

HP Data Protector Local Privilege Escalation

According to its version and build number, the remote version of HP Data Protector is potentially affected by an unspecified, local privilege escalation vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Popular WordPress Themes, Plug-Ins Vulnerable to Attack

Since late March, no fewer than a half-dozen high profile attacks have involved a compromised website built on the WordPress platform. Attackers abuse vulnerabilities in the content management system’s customizable plug-ins and themes to pull off anything from drive-by downloads to watering hole...

[EMET v4.0] Enhanced Mitigation Experience Toolkit

The Enhanced Mitigation Experience Toolkit EMET is designed to help prevent hackers from gaining access to your system. Software vulnerabilities and exploits have become an everyday part of life. Virtually every product has to deal with them and consequently, users are faced with a stream of...

TaxiMonger for Android - 'name' HTML Injection

source: https://www.securityfocus.com/bid/60566/info TaxiMonger for Android is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser,...

Hard-Coded Passwords Found in Medical Devices: ICS-CERT

The Department of Homeland Security’s Industrial Control Systems Cyber Emergency Response Team ICS-CERT issued an alert yesterday warning that some 300 medical devices developed by roughly 40 different vendors contain hard-coded passwords that could be used by unauthorized individuals to access...

CVE-2013-6079

creationtimestamp| type| source ---|---|--- 2013-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26214 2013-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27316...

[OWASP Bricks] Modular Deliberately Vulnerable Web Application

Bricks is a deliberately vulnerable web application built on PHP and MySQL. The project focuses on variations of commonly seen application security vulnerabilities and exploits. Each 'brick' has some sort of vulnerability which can be exploited using tools Mantra and ZAP. The mission is to 'break...