Updated mediawiki packages fix security vulnerability

Check read permission when loading page content in ApiParse CVE-2016-6331 Make blocks log users out if $wgBlockDisablesLogin is true CVE-2016-6332 Make $wgBlockDisablesLogin also restrict logged in permissions CVE-2016-6332 Require login to preview user CSS pages CVE-2016-6333 Escape '' in inline...

Microsoft Internet Explorer elevation of privilege vulnerability (CNVD-2016-07592)

Microsoft Internet Explorer is a popular WEB browser. A security vulnerability exists in Microsoft Internet Explorer that allows remote attackers to build malicious web pages that can be exploited to trick users into parsing them with elevated privileges...

Google Chrome < 53.0.2785.113 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 53.0.2785.113. It is, therefore, affected by multiple vulnerabilities as referenced in the 201609stable-channel-update-for-desktop13 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113...

Google Chrome < 53.0.2785.113 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 53.0.2785.113. It is, therefore, affected by multiple vulnerabilities as referenced in the 201609stable-channel-update-for-desktop13 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113...

Inteno EG101R1 VoIP Router - DNS Change

Inteno EG101R1 VoIP Router - DNS Change !/bin/bash Inteno EG101R1 VoIP Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is...

About the security content of Pages 3.0, Numbers 3.0, and Keynote 3.0 for iOS

About the security content of Pages 3.0, Numbers 3.0, and Keynote 3.0 for iOS This document describes the security content of Pages 3.0, Numbers 3.0, and Keynote 3.0 for iOS. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues...

COMTREND ADSL Router CT-5624 C01_R03 Unauthenticated Remote DNS Changer

!/bin/bash COMTREND ADSL Router CT-5624 C01R03 Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. On...

Tenda ADSL2/2+ Modem 963281TAN - Unauthenticated DNS Change

Exploit for cgi platform in category web applications !/bin/bash Tenda ADSL2/2+ Modem 963281TAN Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interfac...

COMTREND ADSL Router CT-5367 C01_R12, CT-5624 C01_R03 - Unauthenticated DNS Change

Exploit for cgi platform in category web applications !/bin/bash COMTREND ADSL Router CT-5367 C01R12, CT-5624 C01R03 Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exis...

Google Shares Android Nougat, Safe Browsing Security Enhancements

Google this week shared with developers security enhancements it has added to the new Nougat version of Android and additional security features for webmasters via Safe Browsing to help pinpoint harmful content on websites. Under the banner of its nine-year-long Safe Browsing initiative, Google...

CVE-2016-7033

Multiple cross-site scripting XSS vulnerabilities in the admin pages in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the admin pages in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Fortinet FortiWAN Information Disclosure Vulnerability (CNVD-2016-07347)

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. An information disclosure vulnerability exists in Fortinet FortiWAN. An attacker can exploit this vulnerability by accessing the URL /script/cfgshow.php page to obtain a backup file of the device configuration, or by...

LocalTapiola: Oracle WebCenter Sites Support Tools available and Information disclosure (/cs/Satellite)

Oracle WebCenter Sites Support Tools are available in: www.lahitapiola.fi This software is password protected, but some pages are publicly available and reveal internal information. The welcome page is located at: http://www.lahitapiola.fi/henkilo?pagename=Support/Home This page reveal data as th...

[SECURITY] Fedora 24 Update: rubygem-actionview-4.2.5.2-3.fc24

Simple, battle-tested conventions and helpers for building web pages...

CVE-2016-1477

Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891...

Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing a perpetrator to execute arbitrary code

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code through a specially crafted web page...

Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing a perpetrator to execute arbitrary code

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code through a specially crafted web page...

CVE-2016-5817

SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...