Security Bulletin: IBM Developer for z Systems - Add support for TLS v1.2 with MS-CAPI in HCE

Summary IBM Developer for z Systems has added support for TLS v1.2 with MS-CAPI in the Host Connection Emulator Vulnerability Details CVEID: CVE-2017-1796 DESCRIPTION: IBM Developer for z Systems uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly...

Security Bulletin: IBM MessageSight V1.2 has released 1.2.0.3-IBM-IMA-IFIT24219 in response to the vulnerabilities known as Spectre and Meltdown.

Summary IBM has released the following ifix for IBM MessageSight V1.2 in response to CVE-2017-5753, CVE-2017-5715 and CVE-2017-5754. Vulnerability Details CVEID: CVE-2017-5753 CVEID: CVE-2017-5715 CVEID: CVE-2017-5754 Affected Products and Versions Affected IBM MessageSight | Affected Versions...

Security Bulletin: IBM MessageSight affected by GSKit Sweet32 Birthday attacks (CVE-2016-2183)

Summary IBM MessageSight is affected by a GSKit vulnerability in the MQClient. Vulnerability Details CVEID: CVE-2016-2183 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DES/3DES cipher, used as a part of the SSL/TLS protocol. By...

Security Bulletin: HTTP Response Splitting in Liberty affects IBM MessageSight (CVE-2016-0359)

Summary There is a potential HTTP response splitting vulnerability in IBM WebSphere Application Server Liberty. IBM WebSphere Application Server Liberty is used by IBM MessageSight. IBM MessageSight has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2016-0359 DESCRIPTION: IBM...

Security Bulletin: Release of GDPR ready IBM Data Science Experience Local

Summary IBM Data Science Experience Local new release is GDPR ready. Vulnerability Details For more information on GDPR and Data Science Experience Local, see IBM Data Science Experience Local considerations for GDPR readiness Affected Products and Versions Principal Product and Versions --- IBM...

Receiver for Windows Crypto Kit Updates

Overview of the Crypto Kit updates in Citrix Receiver 4.12 and above Receiver for Windows 4.12 and laterprovidesupport to DTLS v1.2 for connections to the VDA. The latest Crypto Kit has deprecated all TLSRSA cipher suites. But, to support backward compatibility with older versions of VDA before...

MobileCms v1.2 Arbitrary File Upload Vulnerability

MobileCms is a ThinkPhp framework based on the development of background content management system , provides for Android Iphone Phonegap windowsPhone call api interface , developers only need to make simple changes , you can provide interface data for mobile devices . MobileCms v1.2 there are...

Ultimate HR System < 1.2 - Directory Traversal / Cross-Site Scripting

Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd Credits & Authors: ================== 8bitsec -...

ICAutosales 1.2 SQL Injection

Title: ICAutosales v1.2 - SQL Injection Credit: Bilal KARDADOU Vendor: http://www.icloudcenter.com Vendor URL: http://www.icloudcenter.com/auto-dealer-car-sales-script.htm Product: AUTO DEALER CAR SALES PHP SCRIPT. Google Dork: N/A Product & Service Introduction: ICAutosales is a powerful, highly...

CVE-2016-1000134

Reflected XSS in wordpress plugin hdw-tube v1.2...

CVE-2016-1000134

WordPress HDW Video Gallery = 1.3, which contains the fix. No additional exploit details are provided in the supplied documents.

SUSE-SU-2016:2396-1 Security update for apache2-mod_nss

This update provides apache2-modnss 1.0.14, which brings several fixes and enhancements: - Fix OpenSSL ciphers stopped parsing at +. CVE-2016-3099 - Created valgrind suppression files to ease debugging. - Implement SSLPPTYPEFILTER to call executables to get the key password pins. - Improvements t...

ourphp v1.2 /client/user/?cn-usershopping.html-&ourphp_cms=del&id=1 两处SQL漏洞

No description provided by source...

ourphp v1.2 /?cn-shoppingorders.html-&ourphp_cms=buy 参数ourphp_opcms SQL漏洞

No description provided by source...

UniPDF 1.2 Buffer Overflow

Exploit Title: UniPDF v1.2 BufferOverflow, SEH overwrite DoS PoC Author : Avinash Kumar Thapa "-Acid" Date of Testing : 25th April 2015 Tested On : Windows XP- Service Pack 3 && Windows 7 Home Basic Vendor Homepage: http://unipdf.com/ Software Link: http://unipdf.com/file/unipdf-setup.exe Steps t...

iUSB 1.2 Arbitrary Code Execution

Document Title: =============== iUSB v1.2 iOS - Arbitrary Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1374 Release Date: ============= 2014-12-10 Vulnerability Laboratory ID VL-ID: ==================================== 137...

iUSB v1.2 iOS - Arbitrary Code Execution Vulnerability

Document Title: =============== iUSB v1.2 iOS - Arbitrary Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1374 Release Date: ============= 2014-12-10 Vulnerability Laboratory ID VL-ID: ==================================== 137...

TigerCom iFolder+ v1.2 iOS - Multiple Vulnerabilities

Document Title: =============== TigerCom iFolder+ v1.2 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1284 Release Date: ============= 2014-07-30 Vulnerability Laboratory ID VL-ID: ==================================== 1284...

zBlog 1.2 - Remote SQL Injection Vulnerability

No description provided by source. zBlog v1.2 Remote SQL Injection Exploit AUTHOR : H-T Team HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : zBlog Version : 1.2 Site : http://kaxz01.free.fr/ Download : http://kaxz01.free.fr/fichiers/zBlog.zip EXPLOITS : 1...

DmxReady Bilboard 1.2 - SQL Injection Vulnerability

No description provided by source. Exploit Title: DmxReady Bilboard v1.2 SQL Injection Vulnerability Google Dork: inurl:incbillboardmanagersummarypopup.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=billboard-manager Version: v1.2 Language: ASP Price : $99....