CVE-2014-8734: Undefined Security Weakness

The Organic Groups Menu aka OG Menu module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pages" permission to change module settings via unspecified vectors...

CentOS 6 : samba (CESA-2013:1542)

Updated samba packages that fix three security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

Visual Mining NetCharts Server Remote Code Execution Exploit

This Metasploit module exploits multiple vulnerabilities in Visual Mining NetCharts. First, a lack of input validation in the administration console permits arbitrary jsp code upload to locations accessible later through the web service. Authentication is typically required, however a 'hidden' us...

Visual Mining NetCharts Server Remote Code Execution

This module exploits multiple vulnerabilities in Visual Mining NetCharts. First, a lack of input validation in the administration console permits arbitrary jsp code upload to locations accessible later through the web service. Authentication is typically required, however a 'hidden' user is...

[SECURITY] Fedora 19 Update: phpMyAdmin-4.2.10.1-1.fc19

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

CVE-2014-8578

Cross-site scripting XSS vulnerability in the Groups panel in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-3475...

[SECURITY] Fedora 20 Update: phpMyAdmin-4.2.10.1-1.fc20

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

Microsoft Windows Authenticated Administration Utility

This module uses a valid administrator username and password to execute an arbitrary command on one or more hosts, using a similar technique than the "psexec" utility provided by SysInternals. Daisy chaining commands with '&' does not work and users shouldn't try it. This module is useful because...

CVE-2014-8072

The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...

Design/Logic Flaw

The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...

CVE-2014-8072

CVE-2014-8072 affects OpenMRS 2.1 Standalone Edition, where the administration module allows remote authenticated users to obtain read access through a direct request to /admin. The available sources confirm the vulnerability details but do not provide exploit steps, affected product variants bey...

CVE-2014-8072

The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...

CVE-2014-8072: Undefined Security Weakness

The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...

PT-2014-8396

Name of the Vulnerable Software and Affected Versions OpenMRS version 2.1 Standalone Edition Description The administration module in OpenMRS allows remote authenticated users to obtain read access via a direct request to "/admin". Recommendations For OpenMRS version 2.1 Standalone Edition,...

CVE-2014-8376

Cross-site scripting XSS vulnerability in the context administration sub-panel in the Site Banner module before 7.x-4.1 for Drupal allows remote authenticated users with the "Administer contexts" Context UI module permission to inject arbitrary web script or HTML via vectors related to context...

CVE-2014-8376

The CVE-2014-8376 entry applies to the Drupal Site Banner module (7.x) prior to 7.x-4.1. Affected component is the context administration sub-panel; the root cause is insufficient sanitization of existing context settings, exposing a Cross-Site Scripting (XSS) vulnerability. Remote authenticated ...

PT-2014-8499

Name of the Vulnerable Software and Affected Versions Drupal Site Banner module versions prior to 7.x-4.1 Description A cross-site scripting XSS issue exists in the context administration sub-panel of the Site Banner module, allowing remote authenticated users with the "Administer contexts" Conte...

luci security update

CentOS Errata and Security Advisory CESA-2014:1390 Updated luci packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common...

Hikit Backdoor Detection

The remote host is running a Hikit backdoor client. Hikit is a remote administration tool RAT used to control computers infected by malware. The 'client' component is used to control those computers and is associated with malicious activity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CentOS Update for krb5-devel CESA-2014:1255 centos5

Check the version of krb5-devel SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882052";...