[SECURITY] Fedora 23 Update: monotone-1.1-13.fc23

monotone is a free, distributed version control system. It provides fully disconnected operation, manages complete tree versions, keeps its state in a local transactional database, supports overlapping branches and extensible metadata, exchanges work over plain network protocols, performs...

wiki.mageia.org XSS vulnerability

Vulnerable URL: https://wiki.mageia.org/mw-en/index.php?action=history=2015-06-18%252020:15:23%252B00'%22%26%25prompt/XSSPOSED/...

Zendesk: Chat History CSV Export Excel Injection Vulnerability

I have found a vulnerability in the Chat History export function. If an attacker submits a special name containing a system command when chatting with an agent and that agent later exports the history of that chat to CSV, the resulting CSV may execute commands when opened. I have tested this usin...

Redaxo CMS 5.0.0 Cross Site Scripting / SQL Injection

=== LSE Leading Security Experts GmbH - Security Advisory 2016-01-18 === Redaxo CMS contains multiple vulnerabilities ------------------------------------------------------------- Problem Overview ================ Technical Risk: high Likelihood of Exploitation: medium Vendor:...

The vulnerability of Safari browser and iOS operating system allows a hacker to gain access to the history of web pages viewed.

The vulnerability of the WebKit module in the Safari browser and the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the history of web pages by using a specially crafted...

Mac OS X : Apple Safari < 9.0.3 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is prior to 9.0.3. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities exist in WebKit due to improper validation of user-supplied input. A remote attacker, via a specially...

Sawmill < 8.6.3 Unspecified Remote Security Vulnerability

Sawmill is prone to an unspecified remote security vulnerability. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

CVE-2016-1728

The Cascading Style Sheets CSS implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site...

CVE-2016-1728

The Cascading Style Sheets CSS implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site...

UBUNTU-CVE-2016-1728

The Cascading Style Sheets CSS implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site...

CVE-2016-1728

The Cascading Style Sheets CSS implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site...

CVE-2016-1728

The Cascading Style Sheets CSS implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site...

Threat Outbreak Alert RuleID20786: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 43306 First Published: 2016 January 28 21:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20786 may contain the following files: Name |...

Threat Outbreak Alert RuleID20747: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 43254 First Published: 2016 January 28 14:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20747 may contain the following files: Name |...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:0250-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Metabrik - Perl Brik Platform

Smartphones have their apps, Web browsers have their apps, shells don’t. With Metabrik , we tried to merge the power of shells with the power of the Perl language by creating a platform allowing to quickly write reusable Briks. Metabrik goals: Glue the Perl language with a shell Give a standardis...

Threat Outbreak Alert RuleID20687: Email Messages Distributing Malicious Software on January 25, 2016

Medium Alert ID: 43198 First Published: 2016 January 26 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20687 may contain the following files: Name |...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Customer Interaction History User GUI Component (CNVD-2016-00616)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Customer Interaction History User GUI component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability by submitting special...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Customer Interaction History User GUI Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Customer Interaction History User GUI component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability by submitting special...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Customer Interaction History User GUI Component (CNVD-2016-00615)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Customer Interaction History User GUI component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability by submitting special...