Design/Logic Flaw

The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a corresponding opt parameter in the Bundle extras argument, which allows attackers to bypass an intended consent dialog and retrieve tokens for arbitrary OAuth scop...

DSA-3159-1 ruby1.8 - security update

Bulletin has no description...

[SECURITY] [DSA 3158-1] unrtf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3158-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 09, 2015 http://www.debian.org/security/faq -...

DSA-3157-1 ruby1.9.1 - security update

Bulletin has no description...

[SECURITY] [DSA 3156-1] liblivemedia security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3156-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 07, 2015 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3155-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-3152-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-3150-1 vlc - security update

Bulletin has no description...

[SECURITY] [DSA 3146-1] requests security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3146-1 [email protected] http://www.debian.org/security/ Sebastien Delafond January 30, 2015 http://www.debian.org/security/faq -...

Windows Escalate Golden Ticket

This module will create a Golden Kerberos Ticket using the Mimikatz Kiwi Extension. If no options are applied it will attempt to identify the current domain, the domain administrator account, the target domain SID, and retrieve the krbtgt NTLM hash from the database. By default the well-known...

DSA-3145-1 privoxy - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3143-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3138-1 : jasper - security update

An off-by-one flaw, leading to a heap-based buffer overflow CVE-2014-8157 , and an unrestricted stack memory use flaw CVE-2014-8158 were found in JasPer, a library for manipulating JPEG-2000 files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute...

DSA-3138-1 jasper - security update

Bulletin has no description...

[SECURITY] [DSA 3136-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3136-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3135-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3135-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 23, 2015 http://www.debian.org/security/faq -...

DSA-3134-1 sympa - security update

Bulletin has no description...

Debian Security Advisory DSA 3132-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian OpenVAS Vulnerability Test $Id: deb3132.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3132-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2015 Greenbone Networks GmbH...

DSA-3132-1 icedove - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3122-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...