Fedora 26 : subversion (2017-704c201dbb)

This update includes the latest stable release of Apache Subversion, version 1.9.6. User-visible changes: Client-side bugfixes : - cp/mv: improve error message when target is an unversioned dir - merge: reduce memory usage with large amounts of mergeinfo issue 4667 Server-side bugfixes : -...

Amazon Linux AMI : mysql55 (ALAS-2017-831)

Server: Security: Privileges unspecified vulnerability CPU Apr 2017 : Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily 'exploitable...

[SECURITY] [DLA 924-2] tomcat7 regression update

Package : tomcat7 Version : 7.0.28-4+deb7u13 Debian Bug : 861872 The security update announced as DLA-924-1 introduced a regression in Tomcats APR protocol due to the fix for CVE-2017-5647 and prevented a successful sendfile request. For Debian 7 "Wheezy", these problems have been fixed in versio...

WePresent WiPG-1000 Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'WePresent WiPG-1000 Command Injection', 'Description' = %q This module exploits a command injection vulnerability in an...

WePresent WiPG-1000 Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in an undocumented CGI file in several versions of the WePresent WiPG-1000 devices. Version 2.0.0.7 was confirmed vulnerable, 2.2.3.0 patched this vulnerability. This module requires Metasploit: http://metasploit.com/download Curre...

stiforpwebinar.com XSS vulnerability

Vulnerable URL: http://www.stiforpwebinar.com/WebConference/systemtest/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Apache APR Detection (HTTP)

HTTP based detection of Apache APR from an exposed /server-info status page. Copyright C 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Gemtek CPE7000 - WLTCS-106 sysconf.cgi Remote Command Execution (Metasploit)

Gemtek CPE7000 - WLTCS-106 sysconf.cgi Remote Command Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Gemtek CPE7000 - WLTCS-106 sysconf.cgi Unauthenticated...

Solaris 10 (x86) : 152255-01 (deprecated)

SunOS 5.10x86: sudo Source Patch. Date this patch was last updated by Sun : Apr/20/16 This plugin has been deprecated and either replaced with individual 152255 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

sews-e.com XSS vulnerability

Vulnerable URL: http://www.sews-e.com/pages/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4562059 Google Pagerank| 0 VIP website status:| No Check...

nvpartnership4training.com XSS vulnerability

Vulnerable URL: http://www.nvpartnership4training.com/ClassByTitle.asp?ClassName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 141716...

Oracle Database Server Unspecified Vulnerability - 07 (Jan 2016)

Oracle Database Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

desk-warehouse.co.uk XSS vulnerability

Vulnerable URL: http://www.desk-warehouse.co.uk/shop/index.asp?searchtext=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2178714 Googl...

vishnu.edu.in XSS vulnerability

Vulnerable URL: http://vishnu.edu.in/faculty.php?deptname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1611448 Google Pagerank| 2 VI...

nationalpayrollweek.com Open Redirect vulnerability

Vulnerable URL: http://www.nationalpayrollweek.com/passthru/urlpassthru.cfm?Partner=D9DFC5DE32B9D8B4C7130006EB658133=PaycheckcitySponsorLogoClick=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect...

129.217.235.33 XSS vulnerability

Vulnerable URL: http://129.217.235.33/pbio/uncfgdev.html?MACADDRESS=30055c87ec02=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

oclHashcat v2.01 - Worlds Fastest Password Cracker

oclHashcat is the world's fastest and most advanced GPGPU-based password recovery utility, supporting five unique modes of attack for over 170 highly-optimized hashing algorithms. oclHashcat currently supports AMD OpenCL and Nvidia CUDA graphics processors on GNU/Linux and Windows 7/8/10, and has...

Solaris 8 (sparc) : 152077-51

JavaSE 6: update 151 patch equivalent to JDK 6u151, 64bit. Date this patch was last updated by Sun : Apr/17/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Oracle: Security Advisory (ELSA-2009-1204)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2009-1107)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...