744 matches found
CVE-2017-1362
IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 126801...
CVE-2017-1362
IBM Security Identity Manager Adapters 6.0 and 7.0 store user credentials in plaintext, readable by local users. The IBM bulletin confirms unsecured data traffic when SSL is not explicitly enabled; enabling SSL by default and importing valid certificates is recommended. Affected: ISIM v6.0 Adapte...
CVE-2017-1362: Insufficiently Protected Credentials
IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 126801...
ABB SREA-01 and SREA-50
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: ABB Equipment: SREA-01 and SREA-50 Vulnerability: Relative Path Traversal AFFECTED PRODUCTS ABB reports that the vulnerability affects the following SREA-01 and SREA-50 legacy remote...
This is How CIA Disables Security Cameras During Hollywood-Style Operations
In last 20 years, we have seen hundreds of caper/heist movies where spies or bank robbers hijack surveillance cameras of secure premises to either stop recording or set up an endless loop for covert operations without leaving any evidence. Whenever I see such scenes in a movie, I wonder and ask...
SQL Injection
zendframework/zendframework1 is vulnerable to SQL injection. The PDO adapters do not filter null bytes from SQL statements, allowing attackers to leverage this flaw to inject and execute SQL queries...
Sierra Wireless WAN Driver Privilege Escalation - us
Lenovo Security Advisory: LEN-12739 Potential Impact: Local Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-9247 Summary Description: A vulnerability was identified in the Sierra Wireless WAN driver for Windows 7, 8 and 10 where a user with local...
kernel security, bug fix, and enhancement update
3.10.0-514.16.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-514.16.1 - tty nhdlc: get rid of racy nhdlc.tbuf 'Herton R. Krzesinski' 1429919...
March 14, 2017—KB4013429 (OS Build 14393.953)
None None...
[SECURITY] Fedora 24 Update: php-guzzlehttp-guzzle-5.3.1-1.fc24
Guzzle is a PHP HTTP client that makes it easy to work with HTTP/1.1 and ta kes the pain out of consuming web services. Pluggable HTTP adapters that can send requests serially or in parallel Doesn't require cURL, but uses cURL by default Streams data for both uploads and downloads Provides event...
AIX 7.1 TL 3 : mustendd (IV82421)
https://vulners.com/cve/CVE-2016-0281 IBM AIX Adapter FC5899 / FC1763 with 'jumboframes' disabled could allow a remote attacker to send specially crafted packets that would crash the adapter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX...
Sql injection
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
UBUNTU-CVE-2015-7695
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
CVE-2015-7695: Improper Neutralization of Special Elements used in an SQL Command
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query...
WiFi-Pumpkin v0.7.5 - Framework for Rogue Wi-Fi Access Point Attack
WiFi-Pumpkin is a security tool that provides the Rogue access point to Man-In-The-Middle and network attacks. Installation Kali 2.0/WifiSlax 4.11.1/Parrot 2.0.5 Python 2.7 git clone https://github.com/P0cL4bs/WiFi-Pumpkin.git cd WiFi-Pumpkin chmod +x installer.sh ./installer.sh --install refer t...
Ruggedization Framework For Security Testing: Gauntlt
Gauntlt is a ruggedization framework that is enables security testing that is usable by devs, ops and security. Gauntlt provides hooks to a variety of security tools and puts them within reach of security, dev and ops teams to collaborate to build rugged software. It is built to facilitate testin...
IBM AIX and VIOS netstat elevation of privilege vulnerability
IBM AIX is a UNIX operating system; IBM VIOS is a virtual IO server. A security vulnerability exists in netstat for IBM AIX and VIOS when using Fibre Channel adapters. Allowing a local attacker could exploit the vulnerability to elevate privileges...
DLA-326-1 zendframework - security update
Bulletin has no description...
PT-2016-3826
Name of the Vulnerable Software and Affected Versions Zend Framework versions prior to 1.12.16 Description The issue allows remote attackers to execute arbitrary SQL commands via a crafted query, due to the failure of the PDO adapters to filter null bytes in SQL statements. Recommendations For...
