Debian DSA-2846-1 : libvirt - several vulnerabilities

Multiple security issues have been found in Libvirt, a virtualisation abstraction library : - CVE-2013-6458 It was discovered that insecure job usage could lead to denial of service against libvirtd. - CVE-2014-1447 It was discovered that a race condition in keepalive handling could lead to denia...

Threat Outbreak Alert: Fake Job Offer Notification Email Messages on January 16, 2014

Medium Alert ID: 32475 First Published: 2014 January 17 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer for the recipient. The text in the email message attempts to convince the recipient to open the...

Debian Security Advisory DSA 2846-1 (libvirt - several vulnerabilities)

Multiple security issues have been found in Libvirt, a virtualisation abstraction library: CVE-2013-6458 It was discovered that insecure job usage could lead to denial of service against libvirtd. CVE-2014-1447 It was discovered that a race condition in keepalive handling could lead to denial of...

PHPJabbers Job Listing Script - Multiple Vulnerabilities

PHPJabbers Job Listing Script - Multiple Vulnerabilities Job Listing Script - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

PHPJabbers Job Listing Script - Multiple Vulnerabilities

Job Listing Script suffers from cross site request forgery and cross site scripting vulnerabilities. Job Listing Script - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home :...

PHPJabbers Job Listing Script - Multiple Vulnerabilities

Job Listing Script - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/preview/job-listing-script/ === Exploit === 1 Cross Sit...

Job Listing Script Cross Site Request Forgery / Cross Site Scripting

Job Listing Script - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/preview/job-listing-script/ .:. Tested On Demo :...

CVE-2010-5292

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

Design/Logic Flaw

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

CVE-2010-5292

Amberdms Billing System (ABS) prior to version 1.4.1, in multi-instance setups, allows local users to read cached data during the cron-triggered services_usage.php run, exposing sensitive information. Affected component is the cache between cron executions; root cause described as reading cache b...

CVE-2010-5292

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

Threat Outbreak Alert: Fake Job Offer Information Email Messages on January 9, 2014

Medium Alert ID: 32388 First Published: 2014 January 9 17:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer notification for the recipient. The text in the email message attempts to convince the recipient to...

Printer Directory Listing Scanner

This module lists a directory on a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer Directory Listing...

Printer File Download Scanner

This module downloads a file from a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer File Download...

Printer Ready Message Scanner

This module scans for and optionally changes the printer ready message on a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class...

Virtual disk size is not a multiple of 1KB

Challenge Backup Copy job fails with the error: Error: Virtual disk size is not a multiple of 1KB. Copy Cause This most often occurs as a result of a P2V conversion. Solution Review the disk of the VM that failed and check for any disks which are not a whole number. This most often presents as a ...

SuSE 11.2 / 11.3 Security Update : Samba (SAT Patch Numbers 8655 / 8656)

This update fixes the following security issues with samba : - DCERPC fraglen not checked. CVE-2013-4408. bnc844720 - winbind pam security problem. CVE-2012-6150. bnc853347 - No access check verification on stream files CVE-2013-4475. And fixes the following non-security issues :. bnc848101 -...

Threat Outbreak Alert: Fake Job Offer Documents Email Messages on December 24, 2013

Severity Alert ID: 32283 First Published: 2014 January 2 14:43 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on December 24, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Jenkins Accessible without Credentials

The remote web server hosts Jenkins, a job scheduling / management system and a drop-in replacement for Hudson. By allowing unauthenticated access to the application, anyone may be able to configure Jenkins and jobs, and perform builds. Additionally, this script checks for unauthenticated access ...

Threat Outbreak Alert: Fake Job Offer Notification Email Messages on November 19, 2013

Medium Alert ID: 31826 First Published: 2013 November 19 17:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer from Altran Company for the recipient. The text in the email message attempts to convince the...