Fedora 20 : asterisk-11.7.0-1.fc20 (2013-24108)

Sat Dec 28 2013 Jeffrey Ollie - 11.7.0-1 : - The Asterisk Development Team has announced the release of Asterisk 11.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk Note that Tenable Network Security has extracted the preceding...

Solaris 10 (sparc) : 143749-02 (deprecated)

Messaging Server 7u2-12.01: core patch. Date this patch was last updated by Sun : Sep/21/10 This plugin has been deprecated and either replaced with individual 143749 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...

Fedora Update for nss FEDORA-2013-23922

Check for the Version of nss OpenVAS Vulnerability Test Fedora Update for nss FEDORA-2013-23922 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 19 Update: nss-3.15.3.1-1.fc19

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Ecmall 2.3 File Inclusion Vulnerability（鸡肋）

简要描述： Ecmall 2.3 File Inclusion Vulnerability 详细说明： Ecmall 2.3 File Inclusion Vulnerability By：zcy Team：网络尖刀 版本：2.3 漏洞文件：app\mypayment.app.php ECMall 社区电子商务系统简称ECMall是上海商派网络科技有限公司继ECShop之后推出的又一个电子商务姊妹产品。与 ECShop 不同的是，ECMall 是一个允许店铺加盟的多店系统。现已停止更新。 漏洞文件存在app/mypayment.app.php中的install方法中第74—88行中...

Fedora 20 : devscripts-2.13.9-1.fc20 (2013-23975)

Update to 2.13.9, see http://ftp-master.metadata.debian.org/changelogs//main/d /devscripts/devscripts2.13.9changelog for details - Fix CVE-2013-7085 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

Ubuntu 13.04 : linux vulnerabilities (USN-2073-1)

Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload UFO. An unprivileged local user could exploit this flaw to cause a denial of service system crash or possibly gain administrative privileges. CVE-2013-4470 Multiple integer overflow flaws were discovered in the...

Ubuntu 13.10 : linux vulnerabilities (USN-2075-1)

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event subsystem that allows...

Ubuntu 12.10 : linux vulnerabilities (USN-2071-1)

Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event subsystem that allows normal users to enable function tracing. An unprivileged local user could exploit this flaw to obtain potentially sensitive information from the kernel. CVE-2013-2930 Stephan Mueller reported an erro...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-2064-1)

Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw makes it easier for a local attacker to break cryptographic protections. CVE-2013-4345 A flaw was discovered in the Linux kernel's IP Virtual Server IPVS support. A local user with the CAPNETADMI...

Fedora Update for nss FEDORA-2013-23900

Check for the Version of nss OpenVAS Vulnerability Test Fedora Update for nss FEDORA-2013-23900 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

D-Link xmlset_roodkcableoj28840ybtide 后门漏洞

No description provided by source...

Unencrypted Windows Error Reporting Crash Reports a Treasure

One of the revelations from latest Snowden document leaks described how the U.S. National Security Agency was able to intercept Microsoft Windows Error Reporting logs in order to fingerprint machines for potential compromise. The German publication Der Spiegel says the documents indicated the NSA...

[SECURITY] Fedora 18 Update: nss-3.15.3.1-1.fc18

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

SerComm Network Device Backdoor Detection

This module can identify SerComm manufactured network devices which contain a backdoor, allowing command injection or account disclosure. Module Options msf use auxiliary/scanner/misc/sercomm/backdoorscanner msf undefinedbackdoorscanner show actions ...actions... msf undefinedbackdoorscanner set...

eshop v7. 5 network fun online shopping system flagship version V7. 5 0day +GETSHELL-a vulnerability warning-the black bar safety net

Test description: Environment: window2003+IIS6. 0 0X1: the discovery of two storage-typeXSS 0x101: register new user ! ! ! 0X2 the background simulation management login and operation ! ! 0X201: proven results, log ! ! 0X202: adding the administrator account ! OK sign in the background ! 1 2 next...

Solaris 10 (x86) : 147694-99 (deprecated)

JavaSE 7x86: update 99 patch equivalent. Date this patch was last updated by Sun : Mar/23/16 This plugin has been deprecated and either replaced with individual 147694 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

Solaris 10 (sparc) : 124581-11 (deprecated)

commcli 7.0-11.00: core patch. Date this patch was last updated by Sun : Mar/12/15 This plugin has been deprecated and either replaced with individual 124581 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Siemens CP 1604 and CP 1616 Improper Access Control

Overview This advisory provides mitigation details for a vulnerability that impacts the Siemens CP 1604 and CP 1616 communication modules. Siemens has identified a vulnerability in the debugging interface of the CP 1604 and CP 1616 communications modules. Independent researchers Christopher...

Fedora 18 : quagga-0.99.21-6.fc18 (2013-23504)

Fix for CVE-2013-6051 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...