7059 matches found
Threat Outbreak Alert RuleID20440: Email Messages Distributing Malicious Software on January 14, 2016
Medium Alert ID: 43009 First Published: 2016 January 14 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20440 may contain the following files: Name |...
Veeam Management Pack 8.0 for System Center Update 1 Release Notes
Challenge Release Notes for Veeam Management Pack 8.0 for System Center Update 1. Cause Please confirm you are running Veeam Management Pack 8.0 prior to installing this update. You can check this in Operations Manager console under Administration | Management Packs, the build number should be...
169.229.157.218 XSS vulnerability
Vulnerable URL: http://169.229.157.218/pbio/uncfgdev.html?MACADDRESS=30055c181f14=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...
[SECURITY] Fedora 22 Update: bugzilla-4.4.11-1.fc22
Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...
[SECURITY] Fedora 23 Update: bugzilla-4.4.11-1.fc23
Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...
Microsoft Collecting More Data of Windows 10 Users than Initially Thought
After several controversial data mining and privacy invasion features within Microsoft's newest operating system, Microsoft continued convincing its users that Windows 10 is not spying on anyone and that the company is not collecting more data than it needs. In addition, Microsoft also updated it...
CVE-2015-8651
creationtimestamp| type| source ---|---|--- 2016-01-06 08:54:29+00:00| seen| MISP/568cd28a-d9b4-4fb9-a5d5-4674950d210f 2016-03-14 15:06:41+00:00| seen| MISP/56e2de34-582c-49f9-8b64-084395ca48b7 2016-07-07 14:45:11+00:00| seen| MISP/577e6af5-875c-4efd-a836-100795ca48b7 2017-01-13 00:48:04+00:00|...
A common GPS satellite positioning platform vulnerability disaster the user's location information in an emergency-vulnerability warning-the black bar safety net
Recently, in the news of the exposure of the many by the GPS positioning device, tracking the abduction of the event http://news.xinhuanet.com/legal/2015-11/15/c1284295262.htm in. Many users have to consult, there is no method for detecting it? So in the market to buy some GPS positioning...
[SECURITY] Fedora 22 Update: conntrack-tools-1.4.2-9.fc22
With conntrack-tools you can setup a High Availability cluster and synchronize conntrack state between multiple firewalls. The conntrack-tools package contains two programs: - conntrack: the command line interface to interact with the connection tracking system. - conntrackd: the connection...
Shopify: Stored XSS in /admin/orders
Hi , I have found a Stored XSS vulnerability in orders page. Steps to reproduce: 1. Create a new order with an item that requires shipping 2. Go to https://.myshopify.com/admin/orders/ 3. Click the Fulfill items button then fulfill the items 4. Now a new fulfillment with an id will be generated ,...
Cisco Emergency Responder Cross-Site Scripting Vulnerability (CNVD-2015-08365)
Cisco Emergency Responder's real-time location-address tracking database and enhanced routing capabilities can transfer emergency calls directly to the appropriate Public Safety Answering Point PASP based on the caller's location. A security vulnerability exists in the Web framework of Cisco...
Redmine Information Disclosure Vulnerability
Redmine is a set of open source Web-based project management and defect tracking tools . An information disclosure vulnerability exists in Redmine. An attacker can exploit this vulnerability to obtain sensitive information...
Dell Foundation Services <= 2.3.3800.0A00 Information Disclosure Vulnerability - Active Check
An issue in Dell Foundation Services, version 2.3.3800.0A00 and below, can be exploited by a malicious website to leak the Dell service tag of a Dell system, which can be used for tracking purposes, or for social engineering. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might ...
CVE-2010-4417
creationtimestamp| type| source ---|---|--- 2015-12-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38859 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oraclebeehiveevaluation.rb 2025-02-06 03:13:40+00:0...
Chrome third-party extensions to be exposed can record private information and sell it-vulnerability warning-the black bar safety net
The Swedish security firm Detectify Labs currently represents some of the Chrome extension app will track The user's Internet history, and even also includes Facebook Connect and privacy of the access token, is connected to a private Dropbox and Google Drive file link. Affect a wide range is not...
Department of Education Lambasted Over Database Vulnerabilities
Like the Office of Personnel Management before it, the Department of Education has failed to heed repeated warnings that its systems contain multiple weaknesses. In a House Committee on Oversight and Government Reform hearing held this week, Congressman and committee chair Jason Chaffetz R-Utah...
Ebay Magento Commerce Cross Site Scripting
Document Title: =============== Magento Bug Bounty 22 - Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1636 Magento Security ID: APPSEC-1121 Release Date: ============= 2015-11-06 Vulnerability Laboratory ID VL-ID:...
Password disclosure vulnerability attached to multiple IBM products
IBM Tivoli Storage Manager TSM for Databases: Data Protection for Microsoft SQL Server, etc. are products of IBM Corporation in the U.S. IBM TSM for Databases aka Spectrum Protect for Databases is a backup and recovery management solution that runs on databases. IBM TSM for Databases a.k.a...
Backup and Replicas of virtual machines running on ESXi 6.0.x with Change Block Tracking (CBT) enabled may not be recoverable
Challenge Leveraging VMware Changed Block Tracking CBT data supplied by VMware ESXi 6.0 can potentially render the data in backups or replicas inconsistent or corrupt. Cause This is a VMware ESXi issue in CBT logic that affects ESXi 6.0 through ESXi 6.0 Update 1a. It is resolved with VMware ESXi...
