openSUSE Security Update : samba (openSUSE-2012-109)

" - Fix memory leak in parent smbd on connection; CVE-2012-0817; bso8724 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-109. The text description of this plugin is C SUSE LLC...

Iptables Blacklist Script

iptables blacklist script A small Bash shell script which uses ipset and iptables to ban a large number of IP addresses published in IP blacklists. ipset uses a hashtable to store/fetch IP addresses and thus the IP lookup is a lot faster than thousands of sequentially parsed iptables ban rules...

Operation was canceled by user

Challenge Job fails with error message: Error Operation was canceled by user Cause The two main causes of this error are: 1. A backup window has been configured within the job. 2. The user canceled the job. Solution If the issue was caused by a backup window, please reconfigure the backup window...

Fedora 19 : check-mk-1.2.4p2-2.fc19 (2014-6818)

Install the mk-job binary on /usr/bin. - Make sure the proper permissions are given to /var/lib/checkmkagent/job to prevent any hard or symlink to be created by a normal user and pointing to any file on the filesystem exposing it on the check-mk-agent output being run as root. Note that Tenable...

Fedora 20 : check-mk-1.2.4p2-2.fc20 (2014-6810)

Install the mk-job binary on /usr/bin. - Make sure the proper permissions are given to /var/lib/checkmkagent/job to prevent any hard or symlink to be created by a normal user and pointing to any file on the filesystem exposing it on the check-mk-agent output being run as root. Note that Tenable...

Code injection

The standard universe shadow condorshadow.std component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job...

CVE-2012-5390

The standard universe shadow condorshadow.std component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job...

CVE-2012-5390: Undefined Security Weakness

The standard universe shadow condorshadow.std component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job...

CVE-2014-3272

The Agent in Cisco Tidal Enterprise Scheduler TES 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers TJB parameters, aka Bug ID CSCuo33074...

Design/Logic Flaw

The Agent in Cisco Tidal Enterprise Scheduler TES 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers TJB parameters, aka Bug ID CSCuo33074...

CVE-2014-3272

The Agent in Cisco Tidal Enterprise Scheduler TES 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers TJB parameters, aka Bug ID CSCuo33074...

CVE-2014-3272: Improper Input Validation

The Agent in Cisco Tidal Enterprise Scheduler TES 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers TJB parameters, aka Bug ID CSCuo33074...

Cisco Tidal Enterprise Scheduler Agent Privilege Escalation Vulnerability

A vulnerability in Cisco Tidal Enterprise Scheduler Agent could allow an authenticated, local attacker to execute arbitrary commands on the affected system with the privileges of the root user. The vulnerability is due to insufficient validation of the Tidal Job Buffers TJB parameters when the...

74cms 二次注入（鸡肋） 但可以造成命令执行

简要描述： 74cms 二次注入（鸡肋） 但可以造成命令执行，企业用户职位名称存在二次注入 详细说明： 登陆企业用户--》发布职位--》修改职位，如图所示： 对了，这里由于对职位的名称做了长度限制，但是只限于前台限制，故而发包如图所示： 然后点击职位管理，再点击延期，如图所示 点击延期职位按钮，可以发现sleep5被执行，到后台查看sql执行语句为完整语句: INSERT INTO qsmemberslog loguid,logusername,logutype,logtype,logaddtime,logip,logaddress,logvalue VALUES...

CVE-2014-1740

CVE-2014-1740 concerns multiple use-after-free vulnerabilities in Chrome’s WebSockets code path (net/websockets/websocket_job.cc) prior to version 34.0.1847.137. The flaw stems from WebSocketJob deletion, allowing remote attackers to cause a denial of service and possibly other impacts. Remediati...

UBUNTU-CVE-2014-1740

Multiple use-after-free vulnerabilities in net/websockets/websocketjob.cc in the WebSockets implementation in Google Chrome before 34.0.1847.137 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to WebSocketJob deletion...

SQL Server Fails with error VSSControl: -2147024809 Backup job failed. Discovery phase failed.

This KB provides information when SQL fails with this error due to a logical file path...

Exchange Logs Not Being Truncated

Challenge This KB provides troubleshooting advice for investigating an apparent Exchange log truncation issue. Cause Exchange truncation may not occur for the following reasons: The Backup Job is not configured to trigger truncation. The VSS operation occurring during the job is not notifying the...

Cannot find VM in the backup file specified for seeding

Challenge A replication job with seeding enabled fails with any of the following errors: Failed to create processing task for VM Error: VM VM not found in backup for initial sync !Screenshot of Failed to create processing task for VM VM Error: VM \VM\ not found in backup for initial sync...

CVE-2014-2059

Directory traversal vulnerability in the CLI job creation hudson/cli/CreateJobCommand.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name...