Oracle Releases January 2015 Security Advisory

Oracle has released its Critical Patch Update for January 2015 to address 169 vulnerabilities across multiple products. This update contains the following security fixes: 8 for Oracle Database Server 36 for Oracle Fusion Middleware 10 for Oracle Enterprise Manager Grid Control 10 for Oracle...

Threat Outbreak Alert RuleID13123: Email Messages Distributing Malicious Software on January 14, 2015

Medium Alert ID: 37029 First Published: 2015 January 15 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13123 may contain the following files: Name |...

Threat Outbreak Alert RuleID13116: Email Messages Distributing Malicious Software on January 14, 2015

Medium Alert ID: 37014 First Published: 2015 January 15 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13116 may contain the following files: Name |...

Threat Outbreak Alert RuleID13108: Email Messages Distributing Malicious Software on January 14, 2015

Medium Alert ID: 37009 First Published: 2015 January 15 14:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13108 may contain the following files: Name |...

Threat Outbreak Alert RuleID13084: Email Messages Distributing Malicious Software on January 12, 2015

Medium Alert ID: 36986 First Published: 2015 January 13 15:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13084 may contain the following files: Name |...

Threat Outbreak Alert RuleID13039: Email Messages Distributing Malicious Software on January 7, 2015

Medium Alert ID: 36940 First Published: 2015 January 8 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13039 and RuleID13039KVR may contain the...

Threat Outbreak Alert RuleID13028: Email Messages Distributing Malicious Software on January 6, 2015

Medium Alert ID: 36932 First Published: 2015 January 7 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13028 may contain the following files: Name |...

Threat Outbreak Alert RuleID4400KVR: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 36916 First Published: 2015 January 6 13:54 GMT Last Updated: 2016 February 1 14:04 GMT Version: 82 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4400KV...

Threat Outbreak Alert RuleID12999: Email Messages Distributing Malicious Software on January 5, 2015

Medium Alert ID: 36909 First Published: 2015 January 6 13:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12999 may contain the following files: Name |...

cgi.scripts-fr.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-51607 Description| Value ---|--- Affected Website:| cgi.scripts-fr.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Oracle January 2007 Security Update Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/22083/info Oracle has released a Critical Patch Update advisory for January 2007 to address these vulnerabilities for supported releases. Earlier unsupported releases are likely to be affected by these issues as well. The...

Liferay XSL - Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'activesupport/json'...

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

IBM Domino 8.0.x / 8.5.x / 9.0.x with IBM Java < 1.6 SR15 FP1 Multiple Vulnerabilities (credentialed check)

The remote host has a version of IBM Domino formerly Lotus Domino 8.0.x / 8.5.x / 9.0.x that is bundled with an IBM Java version prior to 1.6 SR15 FP1. It is, therefore, affected by the vulnerabilities mentioned in the Oracle Java Critical Patch Update advisories for October 2013 and January 2014...

SQL Injection in AdRotate

Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30, 2014 Vendor Patch: January 31, 2014 Public Disclosure: February 20,...

OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on...

Immunity Debugger Stack Overflow Vulnerability – PoC

Title : Immunity Debugger – Crash POC Name: Immunity Debugger v1.85 SEH Chain Stack Overflow Discoverer: Veysel HATAŞ email protected Vendor: Immunity Inc Systems Affected: Windows Risk: Low Status: Not Fixed Discovered: 05 January 2014 Reported: 06 January 2014 Published: 20 March 2014...

SuSE 11.3 Security Update : IBM Java (SAT Patch Number 8878)

This update contains the Oracle January 14 2014 CPU for java-170-ibm. Find more information at: http://www.ibm.com/developerworks/java/jdk/alerts/OracleJanuary142 014CPU %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Kloxo SQL Injection / Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated SQL injection vulnerability affecting Kloxo, as exploited in the wild on January 2014. The SQL injection issue can be abused in order to retrieve the Kloxo admin cleartext password from the database. With admin access to the web control panel,...

ASUS AiCloud Enabled Routers 12 Models - Authentication bypass and Sensitive file/path disclosure

ASUS routers, which are enabled with the AiCloud service SSL ports, are vulnerable to bypass of authentication and sensitive file disclosure. This vulnerability has been observed in all firmware versions, though the latest version increases the complexity of the attack. By sending a special craft...