Reliability Rollup 3179930 for the .NET Framework 4.5.2 on Windows Vista SP2, Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1

Reliability Rollup 3179930 for the .NET Framework 4.5.2 on Windows Vista SP2, Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1 This article describes the reliability rollup 3179930 for the Microsoft .NET Framework on Windows Vista Service Pack 2 SP2, Windows 7 SP1, Windows...

RDS redirected resources showing degraded performance in Windows 8.1 or Windows Server 2012 R2

RDS redirected resources showing degraded performance in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs on a Remote Desktop Session host that‘s running Windows 8.1 or Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you...

[SECURITY] Fedora 25 Update: pcsc-lite-1.8.20-1.fc25

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...

r-rui.net XSS vulnerability

Vulnerable URL: http://www.r-rui.net/product4.php?cid="&cid2;=35&cid3;=134 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check r-rui.net SSL connection:| Grade: ...

Design/Logic Flaw

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

Design/Logic Flaw

QEMU aka Quick Emulator built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged CAPSYSRAWIO user/process could use this flaw to leak or corrupt QEMU memory bytes...

CVE-2015-8817

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

CVE-2015-8743

CVE-2015-8743 affects QEMU with NE2000 device emulation. The flaw is an out-of-bounds read/write in ioport r/w operations, exploitable by a privileged (CAP_SYS_RAWIO) user to leak or corrupt QEMU memory. Public fixes exist (e.g., vendor security updates, notably in SUSE/OpenSUSE advisories) that ...

CVE-2015-8817

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

CVE-2015-8743

QEMU aka Quick Emulator built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged CAPSYSRAWIO user/process could use this flaw to leak or corrupt QEMU memory bytes...

TP-Link Archer CR-700 Cross Site Scripting

Exploit Title: TP-Link Archer CR-700 XSS vulnerability Google Dork: N/A Date: 09/07/2016 Exploit Author: Ayushman Dutta Vendor Homepage: http://www.tp-link.us/ Software Link: N/A Version: 1.0.6 REQUIRED Tested on: Linux CVE : N/A Exploit Information:...

TP-Link Archer CR-700 - Cross-Site Scripting

Exploit Title: TP-Link Archer CR-700 XSS vulnerability Google Dork: N/A Date: 09/07/2016 Exploit Author: Ayushman Dutta Vendor Homepage: http://www.tp-link.us/ Software Link: N/A Version: 1.0.6 REQUIRED Tested on: Linux CVE : N/A Exploit Information:...

CVE-2016-6644

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...

Threat Outbreak Alert RuleID24413: Email Messages Distributing Malicious Software on August 29, 2016

Medium Alert ID: 48649 First Published: 2016 August 29 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24413 may contain the following files: Name |...

Fedora 22 : 2:qemu (2016-ea3002b577)

CVE-2016-4002: net: buffer overflow in MIPSnet bz 1326083 - CVE-2016-4952 scsi: pvscsi: out-of-bounds access issue - CVE-2016-5106: scsi: megasas: out-of-bounds write bz 1339581 - CVE-2016-5105: scsi: megasas: stack information leakage bz 1339585 - CVE-2016-5107: scsi: megasas: out-of-bounds read...

CVE-2016-4821

I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service web-server crash via unspecified vectors...

CVE-2016-4820

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-4820

CVE-2016-4820 is a cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE ETX-R routers (CWE-352). The ETX-R web management interface can be abused by a logged-in user viewing a malicious page, allowing an attacker to perform unintended actions in the user’s authenticated session. Roo...

CVE-2016-4821

CVE-2016-4821 affects I-O DATA DEVICE ETX-R wired routers. The DoS vulnerability allows a remote unauthenticated attacker to cause the web server to terminate abnormally, via unspecified vectors. Public sources (JVN/JVNDB) describe the impact as a remote DoS on the device’s web server and note wo...