PT-2013-4523

Name of the Vulnerable Software and Affected Versions Supermicro X9 generation motherboards with firmware before 3.15 SMT X9 315 Description The issue is related to a buffer overflow in the logout.cgi file within the Intelligent Platform Management Interface IPMI that can be exploited by remote...

CVE-2013-3622: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in logout.cgi in the Intelligent Platform Management Interface IPMI with firmware before 3.15 SMTX9315 on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter...

PT-2013-4524

Name of the Vulnerable Software and Affected Versions Supermicro X9 generation motherboards with firmware before 3.15 SMT X9 315 Description The issue is related to multiple stack-based buffer overflows in the cgi/close window.cgi file within the web interface of the Intelligent Platform Manageme...

[Exploit Pack] The most advanced and easy to use tool for pentesters

Exploit Pack is an open source GPLv3 licensed bundle of scripts known as exploits with an easy to use GUI and a SID IDE. It’s built on JAVA and Python, which means it’s easy to customize and works very nicely on any device. Like every software that has an open source license you can patch, extend...

extmail sid 漏洞

简要描述： 通过sid登录任意账户 详细说明： 1. 访问：http://mail.expacta.com.cn/extmail/tmp/ 获取到未过期sid比如：http://mail.expacta.com.cn/extmail/tmp/sid2bb0a258fad7e8b9701b0a9ce28e6c64， “2bb0a258fad7e8b9701b0a9ce28e6c64”为sid） 2. 访问http://mail.expacta.com.cn，通过firebug或者其他方式 新增cookiesid=2bb0a258fad7e8b9701b0a9ce28e6c64 3...

DSA-2803-1 quagga - several

Bulletin has no description...

DSA-2800-1 nss - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 2796-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2795-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2795-1 [email protected] http://www.debian.org/security/ Michael Gilbert November 13, 2013 http://www.debian.org/security/faq -...

[BSA-085] Security Update for roundcube

Package : roundcube Vulnerability : design error Problem type : remote Debian-specific: no CVE ID : CVE-2013-6172 Debian Bug : 727668 It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, does not properly sanitize the session parameter in...

Debian: Security Advisory (DSA-2796-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-2789-1 strongswan - Denial of service and authorization bypass

Bulletin has no description...

[SECURITY] [DSA 2786-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2786-1 [email protected] http://www.debian.org/security/ Michael Gilbert October 27, 2013 http://www.debian.org/security/faq -...

DSA-2786-1 icu - several

Bulletin has no description...

Debian Security Advisory DSA 2786-1 (icu - several vulnerabilities)

The Google Chrome Security Team discovered two issues a race condition and a use-after-free issue in the International Components for Unicode ICU library. OpenVAS Vulnerability Test $Id: deb2786.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2786-1 using nvtgen 1.0...

DSA-2784-1 xorg-server - use-after-free

Bulletin has no description...

[SECURITY] [DSA 2777-1] systemd security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2777-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 11, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2762-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2761-1] puppet security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2761-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 19, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2553-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...