Linux server discovered bitcoin extortion event, do a good Four Points from a loss-vulnerability warning-the black bar safety net

Following the Windows encountered ransomware virus after the Linux server was bitcoin extortion cases have occurred, you think to pay a ransom just to end? Important warning Recently, Tencent cloud security team monitoring to the cloud on a Linux server began to appear bitcoin extortion event, th...

Solaris 10 (x86) : 152078-91

JavaSE 6x86: update 191 patch equivalent. Date this patch was last updated by Sun : Apr/16/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid109078; scriptversion"1.5";...

Fedora 26 : gd (2018-331af74020)

Fix CVE-2018-5711 - Potential infinite loop in gdImageCreateFromGifCtx Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Solaris 10 (sparc) : 141008-01

SunOS 5.10: kernel/drv/keysock patch. Date this patch was last updated by Sun : Mar/12/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Solaris 10 (sparc) : 141014-01

SunOS 5.10: /usr/bin/dircmp patch. Date this patch was last updated by Sun : Mar/19/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 136839-01

Service Tags. Date this patch was last updated by Sun : May/20/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid107471;...

Solaris 10 (sparc) : 142824-24 (POODLE)

Indexing and Search Service 1u5-24.12700: core patch. Date this patch was last updated by Sun : Mar/24/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 125418-01

SunOS 5.10: in.telnetd patch. Date this patch was last updated by Sun : Sep/07/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 126206-11

SunOS 5.10: zebra ripd quagga patch. Date this patch was last updated by Sun : Jul/15/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 10 (sparc) : 124581-11

commcli 7.0-11.00: core patch. Date this patch was last updated by Sun : Mar/12/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2018-7567

In the Admin Package Manager in Open Ticket Request System OTRS 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server...

Microsoft Windows IIS Default Index Page

The remote web server uses the default IIS index page. This page may contain extra version information and is an indication of a misconfigured server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid106609; scriptversion "1.3";...

Default nginx HTTP Server Settings

The remote webserver contains default settings such as enabled server tokens and/or default files such as the default index or error pages. These items could potentially leak useful information about the server installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Google Chrome < 62.0.3202.94 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 62.0.3202.94. It is, therefore, affected by a vulnerability as referenced in the 201711stable-channel-update-for-desktop13 advisory. - Insufficient data validation in V8 builtins string generator could lead to out of boun...

Microsoft Excel - OLE Arbitrary Code Execution Exploit

Exploit for windows platform in category dos / poc Title: MS Office Excel all versions Arbitrary Code Execution Vulnerability Date: September 30th, 2017. Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: https://products.office.com/ Version: 2007,2010,2013,2016...

EMC RSA Archer < 6.2.0.5 Multiple Vulnerabilities

The version of EMC RSA Archer running on the remote web server is prior to 6.2.0.5. It is, therefore, affected by multiple vulnerabilities. See advisory for details. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid103818; scriptversion"1.10";...

Microsoft Excel - OLE Arbitrary Code Execution

Title: MS Office Excel all versions Arbitrary Code Execution Vulnerability Date: September 30th, 2017. Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: https://products.office.com/ Version: 2007,2010,2013,2016 32/64 bits x86 and x64 Tested on: Windows...

Fedora 26 : kernel (2017-6764d16965)

The 4.12.11 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Google reminds website owners to move to HTTPS before October deadline

With the release of Chrome v62 in less than 3 months, Google will begin marking non-HTTPS pages with text input fields—like contact forms and search bars—and all HTTP websites viewed in Incognito mode as "NOT SECURE" in the address bar. The company has started sending out warning emails to web...

Use MS17-010 patch comparison of the nine vulnerability-vulnerability warning-the black bar safety net

【Translator's note MS17-010 smoke has been the past two months, each of the attention IT security enthusiasts have learned different things. This translation is of the original author combined with the NSA leak of the Arsenal, by patch contrast from the MS17-010 found in nine holes. The author fr...