DSA-2660-1 curl - cookie leak vulnerability

Bulletin has no description...

DSA-2661-1 xorg-server - information disclosure

Bulletin has no description...

[Panoptic] Automates the process of search and retrieval of content for common log and config files through LFI vulnerability

Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through LFI vulnerability. Official introductionary post can be found here. Also, you can find a sample run here. Help Menu Usage: panoptic.py --url...

Moderate: Red Hat Security Advisory: JBoss Enterprise Portal Platform 5.2.2 security update

An update for the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 that fixes multiple security issues is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring...

DSA-2659-1 libapache-mod-security - XML external entity processing vulnerability

Bulletin has no description...

Linksys EA2700 arbitrary file traversal vulnerability-vulnerability warning-the black bar safety net

Brief description: This router software has never carried out security penetration testing, in the not logged in case you can easily get the router/etc/passwd file or other configuration file. Detailed description: This router software has never carried out security penetration testing, in the no...

[Ghost Phisher] GUI suite for phishing and penetration attacks

Ghost Phisher is a Wireless and Ethernet security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library, the program is able to emulate access points and deploy various internal networking servers for networking, penetration testing and...

TinyWebGallery 1.8.9 Path Disclosure

============================================= INTERNET SECURITY AUDITORS ALERT 2013-012 - Original release date: March 19th, 2013 - Last revised: April 6th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 5/10 CVSS Base Score - CVE-ID: CVE-2013-2631...

[SECURITY] [DSA 2654-1] libxslt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2654-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 03, 2013 http://www.debian.org/security/faq -...

[AppUse] Android Pentest Platform Unified Standalone Environment

AppSec Labs recently developed the AppUse Virtual Machine. This system is a unique, free, platform for mobile application security testing in the android environment, and it includes unique custom-made tools created by AppSec Labs. There is no need for installation of simulators and testing tools...

DSA-2654-1 libxslt - denial of service

Bulletin has no description...

[Acunetix Web Vulnerability Scanner 8] Automated Web Application Security Testing Tool

Acunetix W eb V ulnerability S canner WVS is an automated web application security testing tool that audits your web applications by checking for exploitable hacking vulnerabilities. Automated scans may be supplemented and cross-checked with the variety of manual tools to allow for comprehensive...

[Matriux] The Open Source Security Distribution for Ethical Hackers and Penetration Testers and Forensic Experts

The Matriux is a phenomenon that was waiting to happen. It is a fully featured security distribution based on Debian consisting of a powerful bunch of more than 300 open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking...

Fedora Update for rubygem-actionpack FEDORA-2013-4199

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2013-4199 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-9.fc17

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

[SECURITY] Fedora 18 Update: rubygem-actionpack-3.2.8-3.fc18

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

SAProuter - Authentication Bypass

Application: SAP Network Interface Router SAProuter Versions Affected: 39.3 SP4 7100.0.0.201 – Win64/Linux x8664, 40.4 Vendor URL: http://www.sap.com Bugs: Authentication bypass Exploits: NO Reported: 23.03.2013 Vendor response: 24.03.2013 Date of Public Advisory: 25.11.2013 Reference: SAP Securi...

[SECURITY] [DSA 2649-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2649-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 15, 2013 http://www.debian.org/security/faq -...

DSA-2649-1 lighttpd - fixed socket name in world-writable directory

Bulletin has no description...

Debian Security Advisory DSA 2647-1 (firebird2.1 - buffer overflow)

A buffer overflow was discovered in the Firebird database server, which could result in the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2647.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2647-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone...