Fedora 22 : ettercap-0.8.2-1.fc22 (2015-4009)

0.8.2-Ferri Bug Fix !! Fixed some openssl deprecated functions usage !! Fixed log file ownership !! Fixed mixed output print !! Fixed dropprivs function usage !! Fixed nopromisc option usage. !! Fixed missing break in parser code. !! Improved redirect commands !! Fix truncated VLAN packet headers...

Low: Red Hat Bug Fix Advisory: tboot bug fix and enhancement update

Updated tboot packages that fix multiple bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. The tboot packages provide the Trusted Boot tboot open source pre-kernel/VMM module. This module uses Intel Trusted Execution Technology Intel TXT to initialize the launch ...

DES exposure checker - Arbitary File Download Vulnerability

DES exposure checker is a free web application, used to see how real DES images look. This vulnerability allow kind of user can to download a file from the distant server, like PHP files, TXT file, etc. Theory : http://SERVER/getImage.php?name=FILE.EXT Example :...

PT-2015-3533

Name of the Vulnerable Software and Affected Versions AJAX Post Search cardoza-ajax-search plugin versions prior to 1.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the srch txt parameter in a "the search text" action to the...

SuSE 11.3 Security Update : bind (SAT Patch Number 10100)

bind has been updated to version 9.9.6P1, fixing the following security issue : - A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow default 7, and the number of...

ThisData: Missing SPF header on revert.io

Hi, I noticed that there is no TXT record containing a SPF header: PoC dig TXT revert.io +short "google-site-verification=ix6OUwvbN9AJLTcdg3ulWcMibIWGgUyzWEXrWeRYE4" The SPF Header can be used to prevent phishers from impersonating you/your company in the emails' FROM header. Fix You can fix that...

PT-2014-7815

Name of the Vulnerable Software and Affected Versions Enalean Tuleap versions prior to 7.5.99.4 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the lobal txt parameter to plugins/docman API endpoint. Recommendations For versions prio...

Amazon Linux AMI : php55 (ALAS-2014-372)

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file. A denial of service flaw was found in the way the File Information fileinfo extension parsed certain Composite Document...

[SECURITY] [DLA 67-1] php5 security update

Package : php5 Version : 5.3.3-7+squeeze22 CVE ID : CVE-2014-3538 CVE-2014-3587 CVE-2014-3597 CVE-2014-3538 It was discovered that the original fix for CVE-2013-7345 did not sufficiently address the problem. A remote attacker could still cause a denial of service CPU consumption via a...

DLA-67-1 php5 - security update

Bulletin has no description...

Debian DSA-3008-1 : php5 - security update

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-3538 It was discovered that the original fix for CVE-2013-7345 did not...

Medium: php

Issue Overview: A denial of service flaw was found in the way the File Information fileinfo extension parsed certain Composite Document Format CDF files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file. acinclude.m4, as used in the...

Debian Security Advisory DSA 3008-1 (php5 - security update)

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-3538It was discovered that the original fix for CVE-2013-7345 did not...

DSA-3008-1 php5 - security update

Bulletin has no description...

[SECURITY] Fedora 19 Update: tboot-1.8.2-1.fc19

Trusted Boot tboot is an open source, pre-kernel/VMM module that uses Intel Trusted Execution Technology Intel TXT to perform a measured and verified launch of an OS kernel/VMM...

[SECURITY] Fedora 20 Update: tboot-1.8.2-1.fc20

Trusted Boot tboot is an open source, pre-kernel/VMM module that uses Intel Trusted Execution Technology Intel TXT to perform a measured and verified launch of an OS kernel/VMM...

Oracle Linux 5 / 6 : php53 / and / php (ELSA-2014-1012)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1012 advisory. - core: type confusion issue in phpinfo. CVE-2014-4721 - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712 - core: fix heap-base...

php security update

CentOS Errata and Security Advisory CESA-2014:1013 Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

php53 and php security update

5.3.3-27.1 - core: type confusion issue in phpinfo. CVE-2014-4721 - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712 - core: fix heap-based buffer overflow in DNS TXT record parsing. CVE-2014-4049 - core: unserialize SPL ArrayObject / SPLObjectStorage type confusion flaw...

Knot DNS Server Version Detection

Nessus was able to obtain version information from the remote Knot DNS server by sending a special TXT record query to the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid76798; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Knot...