(RHSA-2014:0350) Low: Red Hat Enterprise MRG for Red Hat Enterprise Linux 5 Retirement Notice

In accordance with the Red Hat Enterprise MRG Life Cycle policy, the Red Hat Enterprise MRG product, which includes MRG-Messaging, MRG-Realtime, and MRG-Grid, Version 1 offering for Red Hat Enterprise Linux 5 was retired as of March 31, 2014, and support is no longer provided. Accordingly, Red Ha...

RedHat Update for gnutls RHSA-2014:0247-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GnuTLS certificates validation vulnerability

Invalid validation of version 1 ceritficates...

DSA-2866-1 gnutls26 - certificate verification flaw

Bulletin has no description...

Debian Security Advisory DSA 2852-1 (libgadu - heap-based buffer overflow)

Yves Younan and Ryan Pentney discovered that libgadu, a library for accessing the Gadu-Gadu instant messaging service, contained an integer overflow leading to a buffer overflow. Attackers which impersonate the server could crash clients and potentially execute arbitrary code. OpenVAS Vulnerabili...

DSA-2806-1 nbd - privilege escalation

Bulletin has no description...

Integrated CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================================================== /Exploit Title : Integrated CMS Saudi SQL Injection \ /Exploit Author : DSST \ /Vendor Home Page : in2sol.com \ /Tested on: Windows...

Threat Outbreak Alert: Fake Account Money Transfer Notification Email Messages on July 19, 2013

Severity Alert ID: 30147 First Published: 2013 July 22 16:11 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on July 19, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES...

DSA-2601-1 gnupg - missing input sanitation

Bulletin has no description...

Debian Security Advisory DSA 2570-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2570-1. OpenVAS Vulnerability Test $Id: deb25701.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2570-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

Debian Security Advisory DSA 2547-1 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 2547-1. OpenVAS Vulnerability Test $Id: deb25471.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2547-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2487-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

nginx on Windows Directory Aliases Access Restriction Bypass

The installed version of nginx is 0.x greater than or equal to 0.7.52 or 1.x earlier than 1.2.1 / 1.3.1 and is, therefore, affected by an access restriction bypass vulnerability. By using a request with a specially crafted directory name, such as '/directory::$indexallocation' in place of...

Debian DSA-2517-1 : bind9 - denial of service

Einar Lonn discovered that under certain conditions bind9, a DNS server, may use cached data before initialization. As a result, an attacker can trigger an assertion failure on servers under high query load that do DNSSEC validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Etano 1.x <= Multiple Cross Site Scripting Vulnerabilities

OVERVIEW Etano 1.x versions are vulnerable to Cross Site Scripting. 2. BACKGROUND The community builder script we provide - Etano - was built entirely based on requests from customers of our previous dating package Dating Site Builder. Almost every feature ever requested was built into Etano to...

Nmap NSE net: sshv1

Checks if an SSH server supports the obsolete and less secure SSH Protocol Version 1. OpenVAS Vulnerability Test $Id: gbnmapsshv1net.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Brandon Enright NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap...

DSA-2234-1 zodb - several

Bulletin has no description...

Security fix for the ALT Linux 5 package postfix version 1:2.5.13-alt1

May 9, 2011 Dmitry V. Levin 1:2.5.13-alt1 - Updated to 2.5.13 fixes CVE-2011-1720 in SMTP server Cyrus SASL support...

Default configuration

The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol vulnerabilities...

BarizWeb v1 - R|File Upload Vulnerability (BP Method)

Exploit for php platform in category web applications ----------------------------------------------------------- I MEMBER FROM IN3CT0R TEAM. 1337 DAY .. My + Author : KnocKout Contact : email protected E-Mail : email protected HomePage : http://h4x0resec.blogspot.com Reference :...