General Motors: Reflected Cross Site Script in m.chevrolet.com.wpsegment5.gm.com

A Mobile chevrolet.com website included a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...

General Motors: Reflected Cross Site Script in imtportal.gm.com

The imtportal website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...

OpenSSL CVE-2 0 1 6-0 8 0 0 and CVE-2 0 1 6-0 7 0 3 bug fixes the details of pick-up fun-vulnerability warning-the black bar safety net

! /Article/UploadPic/2016-3/201633103039309.jpg by 3 6 0 information security unit－ au2o3t@3 6 0 CloudSec Team 1. Primer Have been recently and 3 6 0 Nirvan Team DQ430 happy to participate in a encryption vendors of the annual General meeting, the results of openssl is also out of touch lively,...

OpenSSL CVE-2 0 1 6-0 8 0 0 and CVE-2 0 1 6-0 7 0 3 bug fixes the details of pick-up fun-vulnerability warning-the black bar safety net

1. Primer Have been recently and 3 6 0 Nirvan Team DQ430 happy to participate in a encryption vendors of the annual General meeting, the results of openssl is also out of touch lively, maybe really in order to DH brother sent the gift, bitter us these security operations. Thanks to Shawn for...

USASearch - Moderately Critical - Access Bypass - SA-CONTRIB-2016-010

This module indexes public content using USASearch, a program of the General Services Administration’s Office of Citizen Services and Information Technology OCSIT, which offers free search services to any federal, state, local, tribal, or territorial government agency that can be used to search o...

GE SNMP/Web Interface Multiple Vulnerabilities

SNMP/Web Interface adapter is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SFTPfuzzer - Simple FTP Fuzzer

SFTPfuzzer Simple FTP Fuzzer is a very simple software written in Python 2.7 by 0x8b30cc, that allows you to easily fuzz username and password field in an FTP Server , looking for a buffer overflow vulnerability. SFTPfuzzer is written in a very simple way, and the code is well commented, allowing...

Oracle: Security Advisory (ELSA-2016-0258)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Quagga Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Debian Security Advisory DSA 3478-1 (libgcrypt11 - security update)

Daniel Genkin, Lev Pachmanov, Itamar Pipman and Eran Tromer discovered that the ECDH secret decryption keys in applications using the libgcrypt11 library could be leaked via a side-channel attack. See https://www.cs.tau.ac.IL/tromer/ecdh/ for details. OpenVAS Vulnerability Test $Id: deb3478.nasl...

Debian Security Advisory DSA 3479-1 (graphite2 - security update)

Multiple vulnerabilities have been found in the Graphite font rendering engine which might result in denial of service or the execution of arbitrary code if a malformed font file is processed. OpenVAS Vulnerability Test $Id: deb3479.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from...

General Motors: E-mail Spoof in media.gm.com

Email Spoofing vulnerability An email input form existed which may allow email spoofing through a forged sender address. The form has been remediated such that it no longer accepts user input through this field...

General Motors: Content Spoof in webcaps.ecomm.gm.com

Potential content spoofing existed on webcaps.ecomm.gm.com. The vulnerable input parameter has been identified and remediated...

General Motors: Reflected Cross Site Script in www.gmcar.gm.com

GM community action resource website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated...

SUSE: Security Advisory for java-1_7_1-ibm (SUSE-SU-2016:0401-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GE SNMP/Web Interface adapter command injection vulnerability

The GE SNMP/Web Interface adapter is a web server from General Electric that displays current information about an uninterruptible power supply. A security vulnerability in the GE SNMP/Web Interface adapter allows remote attackers to exploit the vulnerability to submit a special request to execut...

WordPress Booking Calendar Contact Form 1.0.23 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0...

GE SNMP/Web Interface adapter information disclosure vulnerability

The GE SNMP/Web Interface adapter is a web server from General Electric that displays current information about an uninterruptible power supply. The GE SNMP/Web Interface adapter file contains information stored in clear text, allowing remote attackers to exploit this vulnerability to obtain...

CVE-2016-0862

General Electric GE Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors...

Design/Logic Flaw

General Electric GE Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to execute arbitrary commands via unspecified vectors...