Threat Outbreak Alert RuleID17643: Email Messages Distributing Malicious Software on August 28, 2015

Medium Alert ID: 40721 First Published: 2015 August 28 20:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17643 may contain the following files: Name |...

CVE-2015-5506

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

Code injection

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

CVE-2015-5506

The vulnerability CVE-2015-5506 affects the Drupal Apache Solr Real-Time module (7.x-1.x) prior to 7.x-1.2. The root cause is that the module does not check the status of an entity when indexing, allowing remote attackers to retrieve information about unpublished content through search results. I...

CVE-2015-5506

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

[SECURITY] Fedora 22 Update: elasticsearch-1.6.1-0.fc22

Elasticsearch is a search server based on Lucene. It provides a distributed, multitenant-capable full-text search engine with a RESTful web interface and schema-free JSON documents. Elasticsearch is developed in Java and is relea sed as open source under the terms of the Apache License. It is a...

Best Self Hosted Alternatives

Best Self Hosted Alternatives Analytics AWStats Generates web, streaming, ftp or mail server statistics graphically. Source Code GPLv3 Perl Countly Real time mobile & web analytics, crash reporting and push notifications platform. Source Code AGPLv3 Javascript Druid A distributed, column-oriented...

Dahua Camera onvif Protocol Authentication Vulnerability

Zhejiang Dahua Technology Co., Ltd. is a leading supplier of surveillance products and solution service providers, providing leading video storage, front-end, display control and intelligent transportation series of products for the world. Dahua IPC-HF2100 and other cameras onvif protocol snapsho...

Cisco 9900 Series IP Phones Denial of Service Vulnerability

Cisco 9900 Series IP Phones is a 9900 series IP phone product from Cisco USA. This product provides voice and video features. A denial of service vulnerability exists in the Cisco 9900 Series IP Phones, which stems from the program's failure to properly support the RTP protocol. A remote attacker...

Drupal Apache Solr Real-Time Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Apache Solr Real-Time is one of the search engine modules. An access bypass vulnerability exists in the Drupal Apache Solr Real-Time module in versions 7.x-1.2 prior to 7.x-1.x. An...

Apache Solr Real-Time - Critical - Access Bypass - SA-CONTRIB-2015-119

This module allows content-changes to be committed to Apache Solr in real-time. The module doesn't check the status of an entity being indexed which means that unpublished content will get indexed by Solr and the title and partial content may be exposed to any user who has permission to search si...

[SECURITY] Fedora 21 Update: python-tornado-3.2.2-1.fc21

Tornado is an open source version of the scalable, non-blocking web server and tools. The framework is distinct from most mainstream web server frameworks and certainly most Python frameworks because it is non-blocking and reasonably fast. Because it is non-blocking and uses epoll, it can handle...

[SECURITY] Fedora 22 Update: python-tornado-3.2.2-1.fc22

Tornado is an open source version of the scalable, non-blocking web server and tools. The framework is distinct from most mainstream web server frameworks and certainly most Python frameworks because it is non-blocking and reasonably fast. Because it is non-blocking and uses epoll, it can handle...

This MicroSD Card Has Entire Secure Computer Inside It

As Millions of Hackers, Spammers and Scammers are after your sensitive online data, you can't really expect your passwords to stay secure forever, even if you are using long passwords. Most of us might be worried about losing our passwords as we keep signing up for online services. However, Googl...

Incorrect handling of self signed certificates in OpenFire XMPP Server

Incorrect handling of self signed certificates in OpenFire XMPP Server Affected software: OpenFire XMPP server Affected versions: 3.9.3 and earlier Vulnerabilities addressed: CVE-2014-3451, CVE-2015-2080 Openfire is a real time collaboration RTC server licensed under the Open Source Apache Licens...

GoAccess - Real-time Web Log Analyzer and Interactive Viewer

GoAccess is an open source real-time web log analyzer and interactive viewer that runs in a terminal in nix systems. It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly. Features GoAccess parses the specified web log file and...

Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information

Multiple vulnerabilities exist in the kernel-rt operating system of openSUSE. Exploitation of these vulnerabilities can lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Same as TD-9436T camera RTSP protocol buffer overflow vulnerability

Tongwei TD-9436T camera is a product of Shenzhen Tongwei Digital Technology Co. In normal user's mode, if an RTSP packet is sent with a method of setup and the string between two consecutive semicolons in the Transport field is longer than 135, the machine will crash with a buffer overflow. An...

[SECURITY] Fedora 22 Update: chrony-2.0-0.3.pre2.fc22

A client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with intermittent internet connections, but it also works well in permanently connected environments. It can use also hardware reference clocks, system...

Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner

Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...