RHEL 6 : rhev-hypervisor6 3.4.0 (RHSA-2014:0674)

Updated rhev-hypervisor6 packages that fix multiple security issues, several bugs, and add various enhancements are now available. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'X7 Chat 2.0.5 lib/message.php pregreplace PHP Code Execution', 'Description' = %q This module exploits a post-auth vulnerability fou...

CVE-2014-7573

The droid Survey Offline Forms aka com.contact.droidSURVEY application 2.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7573

The CVE-2014-7573 entry concerns the Android app “droid Survey Offline Forms” (com.contact.droidSURVEY) version 2.5.2, which fails to verify X.509 certificates from SSL servers. This misimplementation enables man-in-the-middle attackers to spoof the server and exfiltrate sensitive data via a craf...

CVE-2014-5035 - Opendaylight Vulnerable to Local and Remote File Inclusion in the Netconf (TCP) Service

Title =================== Opendaylight Vulnerable to Local and Remote File Inclusion in the Netconf TCP Service Summary =================== Opendaylight www.opendaylight.com is vulnerable to Local and Remote File Inclusion in the Netconf TCP Service via an External Entity Injection XXE...

Sky Broadband Router SR101 - Weak WPA-PSK Generation Algorithm

No description provided by source. Exploit Title: Sky Broadband Router – Weak algorithm used to generate WPA-PSK Key Google Dork: Date: 08/08/2014 Author: Matt O'Connor / Planit Computing Advisory Link: http://www.planitcomputing.ie/sky-wifi-attack.pdf Version: Category: Remote Tested on: Sky SR1...

Sky Broadband Router SR101 - Weak WPA-PSK Generation Algorithm

Exploit Title: Sky Broadband Router – Weak algorithm used to generate WPA-PSK Key Google Dork: Date: 08/08/2014 Author: Matt O'Connor / Planit Computing Advisory Link: http://www.planitcomputing.ie/sky-wifi-attack.pdf Version: Category: Remote Tested on: Sky SR101 Router The SR101 routers supplie...

1 1 5 the network disk by fishing performing XSS-vulnerability warning-the black bar safety net

The first step to construct the seed, the modified seed inside the name and resource name, insert: "scriptalert/xss/;/script ! Then on the 1 1 5 the network disk, offline download. The pop-up select the download resources window, while pop-upxsswindow. !...

Research Shows Increase in Internet Filtering and Usage of FireChat App in Iraq

Researchers at Citizen Lab have taken a close look at the extent of Internet filtering in Iraq, as well as the security of a popular offline chat app used there, and found an increase in the number of services blocked by the government and identified serious privacy and security problems with the...

RedHat Update for qemu-kvm RHSA-2014:0704-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IKE Aggressive Mode Shared Secret Hash Leakage Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7423/info When a VPN is configured to use a pre-shared master secret and a client attempts to negotiate keys in aggressive mode, a hash of the secret is transmitted across the network in clear-text. This may result in the...

MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit

No description provided by source. !/usr/bin/perl MCPWS Personal - Webserver = 1.3.21 DoS Exploit Vendor: http://www.mcpsoftware.de The coder used a unsecure VB-function Open to open requested files and didn't include a working error handling On Error Goto etc. It's possible to exploit this...

MetaProducts Offline Explorer 1.x File System Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2084/info MetaProducts Offline Explorer is an application that allows a user to download the contents of a website or FTP site for offline browsing at a later time. It is possible to view the full contents of the director...

UPC Ireland Cisco EPC 2425 Router / Horizon Box

No description provided by source. Exploit Title: UPC Ireland Cisco EPC 2425 Router / Horizon Box Google Dork: Date: 11/12/2013 Author: Matt O'Connor / Planit Computing Advisory Link: http://www.planitcomputing.ie/upc-wifi-attack.pdf Version: Category: Remote Tested on: Cisco EPC 2425 / Horizon B...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom...

MetaProducts Offline Explorer 1.0 x/1.1 x/1.2 x Directory Traversal

No description provided by source. source: http://www.securityfocus.com/bid/1231/info MetaProducts Offline Explorer is an application that allows a user to download the contents of a website or FTP site for offline browsing at a later time. It is possible to view known files on a system Offline...

openSUSE Security Update : dropbear (openSUSE-SU-2013:1696-1)

dropbear was updated to version 2013.60 to fix following bugs : - Fix 'make install' so that it doesn't always install to /bin and /sbin - Fix 'make install MULTI=1', installing manpages failed - Fix 'make install' when scp is included since it has no manpage - Make --disable-bundled-libtom work ...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0199-1)

java-170-openjdk was updated to icedtea-2.3.4 fixing bugs and also severe security issues : - Security fixes - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries - S8006017, CVE-2013-0422: Improve lookup resolutions - S8006125: Update MethodHandles library interactions - Bug...

openSUSE Security Update : seamonkey (openSUSE-SU-2013:1644-1)

update to SeaMonkey 2.22 bnc847708 - rebased patches - requires NSS 3.15.2 or higher - MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards - MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing addressbar through SELECT element - MFSA 2013-95/CVE-2013-5604...

qemu security update

CentOS Errata and Security Advisory CESA-2014:0743 Updated qemu-kvm packages that fix multiple security issues and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring...