OpenSSL updates, 1.0.2g and 1.0.1s

OpenSSL updates, 1.0.2g and 1.0.1s Updates to this post, including a schedule change are included below The OpenSSL project has announced that they will be releasing versions 1.0.2g and 1.0.1s this week, on Tuesday the 1st of March, UTC. The releases will fix "several defects" that are labelled a...

December Security Release Schedule Update

December Security Release Schedule Update The OpenSSL project announced today that they will be releasing security updates for versions 1.0.2, 1.0.1, 1.0.0 and 0.9.8 on the 3rd of December UTC. The updates will fix a number of security defects, the highest of which is classified as "moderate"...

BlueHat v15 Announces Schedule and Registration

As we inch closer to the 15th BlueHat Security Conference, we are happy to announce the lineup of speakers and topics for this event. This year will continue with a solid speaker and topic selection that engage engineers, executives, and invited guests to discuss and tackle some of the hardest...

Threat Outbreak Alert RuleID18397: Email Messages Distributing Malicious Software on October 2, 2015

Medium Alert ID: 41311 First Published: 2015 October 1 15:10 GMT Last Updated: 2015 October 5 13:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18397 an...

schedule.yale.edu XSS vulnerability

Vulnerable URL: http://schedule.yale.edu/processscheduler.php?mode=cal=457=%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E====1442831612488 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:38 GMT Vulnerability type:| XSS Vulnerability status:|...

tvschedule.zap2it.com XSS vulnerability

Open Bug Bounty ID: OBB-84522 Description| Value ---|--- Affected Website:| tvschedule.zap2it.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Threat Outbreak Alert RuleID16555: Email Messages Distributing Malicious Software on July 9, 2015

Medium Alert ID: 39844 First Published: 2015 July 10 13:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16555 may contain the following files: Name | Siz...

Patch Management: Patch Schedule From Red Hat Satellite Server

Binary data satellitegetschedule.nbin...

i.FTP 'schedule.xml' handles buffer overflow vulnerabilities

Ftp is an i.Ftp client. A buffer overflow vulnerability exists in i.Ftp. When placing the Schedule.xml file in C:\Program Files\Memecode\i.Ftp, user-supplied input is not properly validated, allowing an attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.250.2 - crypto: aesni - fix memory usage in GCM decryption Stephan Mueller Orabug: 21077389 CVE-2015-3331 2.6.39-400.250.1 - xen/pciback: Don't disable PCICOMMAND on PCI device reset. Konrad Rzeszutek Wilk Orabug: 20807440 CVE-2015-2150 - xen-blkfront: fix accounting of reqs when...

i.FTP 2.21 - Time Field (SEH)

i.FTP 2.21 - Time Field SEH !/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software...

i.FTP 2.21 - Time Field SEH Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software Link :...

i.FTP 2.21 - Time Field (SEH)

!/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software Link :...

Novell ZENworks 'ScheduleQuery' Method SQL Injection Vulnerability

Novell ZENworks is a suite of software that supports automated IT management and business process management across resources within an organization. A SQL injection vulnerability in the 'ScheduleQuery' method of the schedule class in Novell ZENworks allows remote attackers to submit specially...

i.FTP 2.21 SEH Overflow Crash PoC

Exploit for windows platform in category dos / poc iFTP 2.21 SEH overwritten Crash PoC Author: Avinash Kumar Thapa "-Acid" Date of Testing : 28th April'2015 Vendor's home page: http://www.memecode.com/iftp.php Software's Url: http://www.memecode.com/data/iftp-win32-v2.21.exe Crash Point: Go to...

Nishishi Factory Fumy Teacher's Schedule Board Cross-Site Scripting Vulnerability

Nishishi Factory Fumy Teacher's Schedule Board is a forum program. A cross-site scripting vulnerability in Nishishi Factory Fumy Teacher's Schedule Board schedule.cgi allows remote attackers to inject malicious script or HTML code that, when viewed with malicious data, can obtain sensitive...

phpSFP - Schedule Facebook Posts 1.5.6 SQL Injection Vulnerability

phpSFP Schedule Facebook Posts version 1.5.6 suffers from a remote SQL injection vulnerability. | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| phpSFP - Schedule Facebook Posts 1.5.6 SQL Injection 0-day Website :...

CVE-2015-0900

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-0900

CVE-2015-0900 corresponds to a cross-site scripting vulnerability in Nishishi Factory Fumy Teacher's Schedule Board. The affected component is the schedule.cgi CGI program (versions 1.10 through 2.21). The root cause is a browser-executable script injection via a crafted URL, enabling arbitrary s...