smtplib Security Bypass Vulnerability

smtplib is a python based package for implementing SMTP clients. A security vulnerability exists in smtplib that allows remote attackers to conduct man-in-the-middle and startTLS stripping attacks...

Google Chrome FrameLoader::startLoad Same Origin Policy Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. In versions of Google Chrome prior to 51.0.2704.79, the Blink/WebKit/Source/core/loader/FrameLoader.cpp/FrameLoader::startLoad function fails to prevent frame navigation in the DocumentLoader separation operation. A same-origin policy bypa...

AutoNessus - Script to Communicate with Nessus API

This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan. It may be helpful to create a cron job/scheduled task for automating the start ...

AWS releases PCI DSS Quick Start for Deploying PCI DSS In-Scope Workloads

In the next step to help customers adopt their platform for PCI, Amazon Web Services AWS has released their PCI DSS Quick Start program. The PCI DSS Quick Start program is the next evolution of cloud providers developing tools for rapid deployment of standardized configurations to drive adoption ...

CVE-2016-4544

The exifprocessTIFFinJPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted header data...

RHEL 6 : icedtea-web (RHSA-2016:0778)

An update for icedtea-web is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Moderate: Red Hat Security Advisory: icedtea-web security, bug fix, and enhancement update

An update for icedtea-web is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

UBUNTU-CVE-2016-4544

The exifprocessTIFFinJPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted header data...

WordPress Google SEO Pressor Snippet Plugin <= 1.2.6 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability, because these parameters are not sanitized: "Address Region", "Longitude", "Latitude", "Event type", "Offer aggregate", "Low Price", "High Price", "Offer Url", "Price", "Events Website", "Offer Quantity", "Price valid Until",...

How to configure Desktop or Start Menu shortcuts With Citrix Receiver 4.x

Steps to configure Desktop or Start Menu shortcuts...

April 12, 2016 — KB3147461 (OS Build 10240.16769)

None None...

START!? - Menu-style Drawer - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application START!? - Menu-style Drawer published at the 'play' market has multiple vulnerabilities...

Start MyPeugeot - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Start MyPeugeot published at the 'play' market has multiple vulnerabilities...

Start Deutsch Verb - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Start Deutsch Verb published at the 'play' market has multiple vulnerabilities...

Start-App - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Start-App published at the 'play' market has multiple vulnerabilities...

TRS(ids新老版本)设计缺陷(xxe/用户信息泄露包括密码等)

简要描述： TRSids设计缺陷xxe/用户信息泄露包括密码，好久没有发过漏洞了，突然上来看了看，发现漏洞提交页面都变了 详细说明： 首先我们看看web.xml配置文件: ServiceServlet com.trs.idm.admin.service.ServiceServlet ServiceServlet /service 跟进ServiceServlet protected void serviceHttpServletRequest request, HttpServletResponse response throws ServletException, IOExceptio...

PT-2016-6698 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.6.3 on powerpc platforms Description: The issue is related to the mishandling of transactional state by the start thread function in the Linux kernel, which can be exploited by local users to cause a denial of...

Denial of Service Vulnerability in Multiple HP Products

HP ZBook and so on are the American Hewlett-Packard HP company's computer products.ZBook is a set of mobile workstations high-performance mobile computers; HP EliteBook Folio 1000/800/700 Series are business computer products; HP Z240 Tower/Z240 SFF/Z238 Microtower Workstation N51 are workstation...

UBUNTU-CVE-2016-2841

The ne2000receive function in the NE2000 NIC emulation support hw/net/ne2000.c in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via crafted values for the PSTART and PSTOP registers, involving ring buffer control...

HPSBHF03439 rev.2 - HP Commercial PCs with Sure Start, Local Denial of Service

Potential Security Impact Denial of Service DoS Source: Hewlett­Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY HP has identified a potential security vulnerability with the Sure Start implementation on certain 2015 commercial platforms. This vulnerability could be...