CVE-2013-0210: Improper Control of Generation of Code

The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands...

PT-2014-2436

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.2.0 Description The issue allows remote attackers to execute arbitrary commands. This is related to escaping and Puppet commands in the smart proxy Puppet run API. Recommendations For versions prior to 1.2.0, update...

Run a Command on Multiple Servers: ClusterSSH

Run a Command on Multiple Servers How to run a command on multiple servers at once? If you maintain multiple Linux servers, there are cases where you want to run the same commands on all the servers. For example, you may want to install/upgrade packages, patch the kernel, and update configuration...

USN-2184-2 unity vulnerabilities

USN-2184-1 fixed lock screen vulnerabilities in Unity. Further testing has uncovered more issues which have been fixed in this update. This update also fixes a regression with the shutdown dialogue. We apologize for the inconvenience. Original advisory details: Frédéric Bardy discovered that Unit...

UBUNTU-CVE-2014-2893

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names...

CVE-2013-6469: Improper Control of Generation of Code

JBoss Overlord Run Time Governance RTGov 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language MVEL expression. NOTE: some of these details are obtained from third party information...

DEBIAN-CVE-2012-0871

The sessionlinkx11socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/...

java-1.7.0-openjdk security update

1.7.0.55-2.4.7.1.0.1.el510 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1.7.0.55-2.4.7.1.el5 - regenerated sources to fix TCK failure - Resolves: rhbz1085000 1.7.0.55-2.4.7.0.el5 - bumped to future icedtea-forest 2.4.7 - updatever set to 55, buildver se to 13, release rese...

Beware of Zeus Banking Trojan Signed With Valid Digital Signature

A new dangerous variant of ZeuS Banking Trojan has been identified by Comodo AV labs which is signed by stolen Digital Certificate which belongs to Microsoft Developer to avoid detection from Web browsers and anti-virus systems. Every Windows PC in the world is set to accept software "signed" wit...

Over 20Gbps DDoS attacks Now Become Common for Hackers

The Distributed Denial of Service DDoS attack has become more sophisticated and complex and therefore has become one of the favorite weapon for the cyber criminals to temporarily suspend the services of any host connected to the Internet and till now nearly every big site had been a victim of thi...

initramfs-tools未明安全漏洞

Bugtraq ID:66414 initramfs-tools是一款linux下生成initramfs的工具。 initramfs-tools没有用noexec选项不正确安装/run，可导致不明漏洞。 0 initramfs-tools Ubuntu linux用户可参考如下厂商提供的安全公告获得补丁信息： http://www.ubuntu.com/usn/usn-2153-1/...

Kemana Directory 1.5.6 (run param) Local File Inclusion Vulnerability

Summary Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features including: CMS engine based on our qEngine, multiple directories support, user friendly administration control panel, easy to use custom fields,...

initramfs-tools weak permissions

/run is mounted withour noexec option...

Ubuntu: Security Advisory (USN-2153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2153-1: initramfs-tools vulnerability

Kees Cook discovered that initramfs-tools incorrectly mounted /run without the noexec option, contrary to expected behaviour...

PT-2014-2463

Name of the Vulnerable Software and Affected Versions iTop versions 2.0, 1.2.1, 1.2, and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the search feature. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specificall...

UBUNTU-CVE-2013-4433

Cross-site scripting XSS vulnerability in XHProf before 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the run parameter...

CVE-2013-4433

Cross-site scripting XSS vulnerability in XHProf before 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the run parameter...

CVE-2013-4433: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in XHProf before 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the run parameter...

PT-2014-2793

Name of the Vulnerable Software and Affected Versions XHProf versions prior to 0.9.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the run parameter. This can lead to the execution of malicious code on the victim's browser...