Multiple Vulnerabilities in JeeCMS v8.1 Template Management Function

JEECMS is a JEECMSv8.1 version is a collection of PC Internet, mobile Internet and WeChat website in one of the website group management system. JeeCMS v8.1 template management function exists file write, arbitrary file naming, arbitrary file creation vulnerability. An attacker can exploit the...

EulerOS 2.0 SP1 : ipa (EulerOS-SA-2017-1013)

According to the versions of the ipa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the default IdM password policies that lock out accounts after a certain number of failed login attempts were also applied t...

Denial Of Service (DoS) Through Infinite Loop

naming-resources is vulnerable to denial of service DoS attacks. Attackers can cause an infinite loop by placing files with at the start of the file name in the library tree...

Denial Of Service (DoS)

web-naming is vulnerable to denial of service DoS attacks. Attackers can cause an infinite loop by placing files with at the start of the file name in the library tree...

tomcat: unrestricted access to global resources

It was discovered that it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not...

tomcat: unrestricted access to global resources

It was discovered that it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not...

CVE-2017-5936

OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions...

Malware exploit: Gorynch\diamond

Gorynch\diamond Type: File Upload Vulnerability Author: Xylitol Gorynych v4.2.0.257- File Upload Vulnerability Gorynych/DiamondFox v4.2.0.257 - File Upload Vulnerability File naming convention: file.log.php go to logs/dump/file.log.php file.jpg.php go to logs/scr/file.jpg.php file.LOG.php go to...

Moderate: Red Hat Security Advisory: ipa security update

An update for ipa is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

[SECURITY] Fedora 24 Update: zookeeper-3.4.9-1.fc24

ZooKeeper is a centralized service for maintaining configuration informatio n, naming, providing distributed synchronization, and providing group services...

[SECURITY] Fedora 25 Update: zookeeper-3.4.9-1.fc25

ZooKeeper is a centralized service for maintaining configuration informatio n, naming, providing distributed synchronization, and providing group services...

Malware exploit: Gorynch Diamond V4.2.0.257

Type: File Upload Vulnerability Author: Xylitol !DOCTYPE html html head titleGorynych v4.2.0.257- File Upload Vulnerability/title !-- Panel.zip hash: e698cf7cc57b20c02fce6de83299b75b -- /head body h1 Gorynych/DiamondFox v4.2.0.257 - File Upload Vulnerability /h1 form...

UBUNTU-CVE-2016-9449

The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags...

CVE-2016-7222

Task Scheduler in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted UNC pathname in a task, aka "Task Scheduler Elevation of Privilege Vulnerability."...

Yes, My Name is ||

Different cultures and nationalities have different naming conventions; I came from a one that led me to face the universe with a personal name "Or". I fact, my name has different meanings in different languages. In English the meaning of "Or" is function word that indicate alternatives and in...

Jndi injection and Spring RCE vulnerability analysis-vulnerability warning-the black bar safety net

Foreword Because before has been traveling, and haven't done the research, eleven during the re-focus of the 2 0 1 6 BlackHat the above subject, wherein jndi injection caught my attention, this paper mainly divided into the following 3 sections, the understanding of jndi, analysis jndi injection...

OS X Forensic Evidence Collection: OSXCollector

OS X Forensic Evidence Collection: OSXCollector Forensic Collection The collection script runs on a potentially infected machine and outputs a JSON file that describes the target machine. OSXCollector gathers information from plists, SQLite databases and the local file system. Forensic Analysis...

The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.

The vulnerability of the Java Development Kit, related to subcomponents of the application. Exploiting this vulnerability allows a malicious attacker to compromise data confidentiality and integrity by using the JNDI subcomponent...

The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.

The vulnerability of the Java Development Kit, related to the program’s subcomponents. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using the JNDI subcomponent...

The vulnerability of the Jrockit software platform allows a malicious individual to compromise data confidentiality and integrity.

The vulnerability of the Jrockit platform, related to its subcomponents. Exploiting this vulnerability allows an unauthorized attacker to compromise data confidentiality and integrity by using the JNDI subcomponent...