Fedora 20 : community-mysql-5.5.37-1.fc20 (2014-5369)

Update to MySQL 5.5.37, for various fixes described at http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

Fedora 19 : syncevolution-1.4.1-1.fc19 (2014-5236)

Update to 1.4.1 stable release CVE-2014-1639 syncevolution: insecure temporary file usage in installcheck-local.sh It was found 1 that the installcheck-local.sh script of the syncevolution package creates temporary files in an insecure way. A local attacker could use these flaws to perform a...

Cisco IOS IKE Module DoS

The Cisco Internet Key Exchange IKE module has a denial of service vulnerability. According to its self-reported IOS version, the remote device may be affected by this vulnerability. The IKE module does not handle specially crafted main mode packets and can allow established IKE security...

Ubuntu 13.10 : linux vulnerabilities (USN-2179-1)

A flaw was discovered in the Kernel Virtual Machine KVM subsystem of the Linux kernel. A guest OS user could exploit this flaw to execute arbitrary code on the host OS. CVE-2014-0049 Al Viro discovered an error in how CIFS in the Linux kernel handles uncached write operations. An unprivileged loc...

Ubuntu 12.04 LTS : linux-lts-saucy vulnerabilities (USN-2177-1)

A flaw was discovered in the Kernel Virtual Machine KVM subsystem of the Linux kernel. A guest OS user could exploit this flaw to execute arbitrary code on the host OS. CVE-2014-0049 Al Viro discovered an error in how CIFS in the Linux kernel handles uncached write operations. An unprivileged loc...

Kolibri 2.0 Stack Buffer Overflow

!/usr/bin/python Exploit Title: Kolibri GET request Stack buffer Overflow Date: 25 April 2014 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.senkas.com/kolibri/download.php Version: Kolibri 2.0 Tested on: Windows XP SP3, Spanish Thanks:To my wife...

Fedora 20 : syncevolution-1.4.1-1.fc20 (2014-5186)

Update to 1.4.1 stable release CVE-2014-1639 syncevolution: insecure temporary file usage in installcheck-local.sh It was found 1 that the installcheck-local.sh script of the syncevolution package creates temporary files in an insecure way. A local attacker could use these flaws to perform a...

Sixnet Sixview 2.4.1 - Web Console Directory Traversal

Sixnet Sixview 2.4.1 - Web Console Directory Traversal Exploit Title: Sixnet sixview web console directory traversal Date: 2014-04-21 Exploit Author: daniel svartman Vendor Homepage: www.sixnet.com Software Link: Not available, hardware piece - appliance Version: 2.4.1 Tested on: Sixnet Sixview w...

Fedora 20 : java-1.7.0-openjdk-1.7.0.60-2.4.7.0.fc20 (2014-5280)

Security update : http://blog.fuseyism.com/index.php/2014/04/16/security-icedtea-2-4-7-f or-openjdk-7-released/ for http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 20 : kernel-3.13.10-200.fc20 (2014-5235)

The 3.13.10 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

FS-NyarL - Network Takeover & Forensic Analysis Tool

NyarL it's Nyarlathotep, a mitological chaotic deity of the writer HP. Lovecraft's cosmogony. It's represent Crawling Chaos and FS-NyarL it's The Crawling Chaos of Cyber Security :- A network takeover & forensic analysis tool - useful to advanced PenTest tasks & for fun and profit - but use it at...

Cogent DataHub Code Injection Vulnerability

OVERVIEW NCCIC/ICS-CERT has become aware of a code injection vulnerability affecting the Cogent DataHub application produced by Cogent Real-Time Systems, Inc. hereafter referred to as Cogent. Security researcher John Leitch reported this vulnerability to the Zero Day Initiative ZDI, who then...

Nmap 6.45 - Free Security Scanner For Network Exploration & Security Audits

Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols UDP, TCP, ICMP, etc...

Fedora 20 : php-5.5.11-1.fc20 (2014-4767)

03 Apr 2014, PHP 5.5.11 Core : - Allow zero length comparison in substrcompare Tjerk - Fixed bug 60602 procopen changes environment array Tjerk SPL : - Added feature 65545 SplFileObject::fread Tjerk cURL : - Fixed bug 66109 Can't reset CURLOPTCUSTOMREQUEST to default behaviour Tjerk - Fix...

Fedora 20 : ImageMagick-6.8.6.3-4.fc20 (2014-4969)

Build 6.8.6-3 version because soname bump happened in newer. - Concretize soname versioning. - Add Patch0: ImageMagick-6.8.7-psd-CVE.patch CVE bug fix backporting: http://www.imagemagick.org/discourse-server/viewtopic. php?f=3&t=25128&sid=ff40ad66b1f845c767aa77c7e32f9f9c&p =109901p109901 for fix...

Fedora 20 : v8-3.14.5.10-7.fc20 (2014-4625)

Common Vulnerabilities and Exposures assigned an identifier CVE-2014-1704 to the following vulnerability : URL: https://vulners.com/cve/CVE-2014-1704 Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a deni...

Fedora 20 : php-ZendFramework2-2.2.6-1.fc20 (2014-4612)

Upstream release notes: https://github.com/zendframework/zf2/releases/tag/release-2.2.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

CVE-2014-2850

CVE-2014-2850 affects Sophos Web Appliance: the netinterface (network interface configuration) page allows remote administrators to execute arbitrary shell commands via metacharacters in the address parameter, on affected versions prior to 3.8.2. Public references and feeds corroborate remote com...

MaraDNS Server Version Detection

Nessus was able to obtain version information from the remote MaraDNS server by sending a special TXT record query to the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73473; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"MaraDN...

Optimizing Network Security with SolarWinds Firewall Security Manager (FSM)

Firewalls are the front-line soldiers, who sit strategically at the edge of your network and defend it from various security threats. Firewalls require constant maintenance and management to ensure that they are accurately configured for optimal security, continuous compliance, and high...