Unauthorized Content Type Overwriting

Apache James Mailbox API is vulnerable to unauthorized content type overwriting. The vulnerability exists because the application does not link the AttachmentId with the content type in mailbox...

Fatek Automation PLC WinProladder 3.11 Build 14701 Buffer Overflow

require 'msf/core' class MetasploitModule 'Fatek Automation PLC WinProladder Stack-based Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Fatek Automation PLC WinProladder v3.11 Build 14701. The vulnerability is triggered when a client connects to a...

Motorola Netopia Netoctopus SDCS Stack Buffer Overflow

require 'msf/core' class MetasploitModule 'Motorola Netopia Netoctopus SDCS Stack Buffer Overflow', 'Description' = %q This module exploits a vulnerability within the code responsible for parsing client requests. When reading in a request from the network, a 32-bit integer is read in that specifi...

KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow (Metasploit)

KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'KingScada AlarmServer Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in KingScada 'James Fitts' , 'License' = MSFLICENSE,...

Alienvault OSSIM av-centerd - Util.pm sync_rserver Command Execution (Metasploit)

Alienvault OSSIM av-centerd - Util.pm syncrserver Command Execution Metasploit require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver...

Ubuntu 14.04 LTS / 16.04 LTS : Subversion vulnerabilities (USN-3388-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3388-1 advisory. Joern Schneeweisz discovered that Subversion did not properly handle host names in 'svn+ssh://' URLs. A remote attacker could use this to...

[SECURITY] Fedora 26 Update: expat-2.2.1-1.fc26

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

[SECURITY] Fedora 25 Update: expat-2.2.1-1.fc25

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

Trump Fires FBI Director Over Clinton Probe, Amid Russia Investigation

President Donald Trump has abruptly fired James Comey, the director of the Federal Bureau of Investigation FBI who was leading an investigation into alleged links between Trump and Russia. The White House announced on Tuesday that Comey was fired on the "clear recommendation" of Deputy Attorney...

On IP Camera Backdoors, Comey, Going Dark, Hacking Back and More

Mike Mimoso and Chris Brook discuss the news of the week including a rash of new IP camera backdoors, James Comey’s talk at Boston College, hacking back vs. active defense, and the DOJ dropping one of its Playpen cases. Download: ThreatpostNewsWrapMarch102017.mp3 Music by Chris Gonsalves...

USN-3195-1 nova-lxd vulnerability

James Page discovered that Nova-LXD incorrectly set up virtual network devices when creating LXD instances. This could result in an unintended firewall configuration...

Student Faces 10 Years In Prison For Creating And Selling Limitless Keylogger

A 21-year-old former Langley High School student, who won a Programmer of the Year Award in high school, pleaded guilty on Friday to charges of developing and selling custom key-logging malware that infected thousands of victims. Zachary Shames from Virginia pleaded guilty in a federal district...

affiliates.stanjamesaffiliates.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-189116 Description| Value ---|--- Affected Website:| affiliates.stanjamesaffiliates.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

[SECURITY] Fedora 22 Update: expat-2.1.1-2.fc22

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

[SECURITY] Fedora 24 Update: expat-2.1.1-2.fc24

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

CVE-2015-7611

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors...

Design/Logic Flaw

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors...

CVE-2015-7611

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors...

CVE-2015-7611

Apache James Server 2.3.2 with file-based user repositories is affected by CVE-2015-7611, a command-injection vulnerability that allows remote attackers to execute arbitrary system commands via insecure user-creation handling. The root cause is insufficient input validation during user creation, ...

ingridjames.com XSS vulnerability

Vulnerable URL: http://www.ingridjames.com/build/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14772080 VIP website status:| No Check ingridjames.com SS...