[SECURITY] Fedora 25 Update: curl-7.51.0-1.fc25

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

cURL/libcurl 7.x < 7.50.1 Multiple Vulnerabilities

Binary data 9764.prm...

Joomla com_jsjobs SQL injection Vulnerability

Exploit for php platform in category web applications |✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚ !! Exploit Title : Joomla comjsjobs SQL injection Vulnerability !! Exploit Author : xBADGIRL21 !! Dork : inurl:index.php?option=comjsjobs !! Vendor Homepage : http://www.joomsky.com !! MyBlog :...

[SECURITY] Fedora 24 Update: curl-7.47.1-8.fc24

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Joomla JSJobs 1.0.7.5 SQL Injection

|\aaaaaaaaaaaaaaaaaaaaaaa !! Exploit Title : Joomla comjsjobs SQL injection Vulnerability !! Exploit Author : xBADGIRL21 !! Dork : inurl:index.php?option=comjsjobs !! Vendor Homepage : http://www.joomsky.com !! MyBlog : http://xbadgirl21.blogspot.com/ !! version : 1.0.7.5 !! Tested on: BackBox !!...

Micro Focus (Novell) Filr Detection (HTTP)

HTTP based detection of Micro Focus Novell Filr. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

AutoNessus - Script to Communicate with Nessus API

This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan. It may be helpful to create a cron job/scheduled task for automating the start ...

74cms V3.4(20140808) user/personal/personal_resume.php SQL注入漏洞

No description provided by source...

[SECURITY] Fedora 22 Update: mingw-curl-7.47.0-1.fc22

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

Threat Outbreak Alert RuleID20961: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43439 First Published: 2016 February 5 20:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20961 and RuleID20961KVR may contain the...

USN-2869-1 openssh vulnerabilities

It was discovered that the OpenSSH client experimental support for resuming connections contained multiple security issues. A malicious server could use this issue to leak client memory to the server, including private client user keys...

[SECURITY] Fedora 21 Update: imapsync-1.644-2.fc21

imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preser ved, and t...

PT-2015-7712

Name of the Vulnerable Software and Affected Versions ARM mbed TLS versions 1.3.x through 1.3.13 ARM mbed TLS versions 2.x through 2.1.1 Description The issue is related to a heap-based buffer overflow in ARM mbed TLS, which can be triggered by remote SSL servers. This occurs when a long session...

Threat Outbreak Alert RuleID17960: Email Messages Distributing Malicious Software on September 13, 2015

Medium Alert ID: 40988 First Published: 2015 September 14 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17960 may contain the following files: Name ...

Threat Outbreak Alert RuleID17941: Email Messages Distributing Malicious Software on September 11, 2015

Medium Alert ID: 40973 First Published: 2015 September 11 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17941 may contain the following files: Name ...

Threat Outbreak Alert RuleID17687: Email Messages Distributing Malicious Software on September 1, 2015

Medium Alert ID: 40760 First Published: 2015 September 2 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17687 may contain the following files: Name |...

Configuration Bypass During S3 Resume

Summary: System firmware of certain products does not completely protect platform configuration data. Description: During resume from sleep, system firmware needs to reinitialize hardware to a secured configuration. In order to protect against malware that has already compromised an OS, firmware...

Multiple Dell devices vulnerable

Dell Latitude, etc. are the products of the United States Dell Dell company.Dell Latitude and OptiPlex are notebook product models; Precision Mobile Workstation is a precision mobile workstation; Precision Workstation CS is a set of mobile workstation Client; BIOS Basic Input-Output System is a s...

PHPYun越权修改简历状态

简要描述： PHPYUN 未授权修改企业发布招聘 详细说明： 在wap/member/com.class.php 中的 function jobsetaction if$GET'status' $this-obj-updateonce'companyjob',array'status'=intval$GET'status',array'id'=intval$GET'id';//未授权修改企业发布招聘状态 $this-memberlog"修改职位招聘状态"; $this-waplayermsg"设置成功！"; 利用url如下...

php云人才系统越权替换简历

简要描述： RT 详细说明： 版本：PHPYUN人才招聘系统4.0beta 说明：简历创建的方式有两种，直接创建跟在线黏贴，问题出在，修改在线黏贴的简历 文件位置：\upload\member\user\model\expectq.class.php function saveaction if$POST'submit' $eid=int$POST'eid'; $data'doc'=strreplace"&","&",htmlentitydecode$POST'doc',ENTQUOTES,"GB2312"; $POST'lastupdate'=mktime;...