CVE-2013-4415

Multiple cross-site scripting XSS vulnerabilities in Spacewalk and Red Hat Network RHN Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 whereCriteria variable in a software channels search; 2 endyear, 3 starthour, 4 endampm, 5 endday, 6 endhour, 7 endminute, 8...

CVE-2013-4415

Multiple cross-site scripting XSS vulnerabilities in Spacewalk and Red Hat Network RHN Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 whereCriteria variable in a software channels search; 2 endyear, 3 starthour, 4 endampm, 5 endday, 6 endhour, 7 endminute, 8...

CVE-2013-4415: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Spacewalk and Red Hat Network RHN Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 whereCriteria variable in a software channels search; 2 endyear, 3 starthour, 4 endampm, 5 endday, 6 endhour, 7 endminute, 8...

Atmail WebMail 7.0.2 Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2013-014 - Original release date: March 25th, 2013 - Last revised: March 25th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 4.3/10 CVSSv2 Base Scored - CVE-ID: CVE-2013-6229...

phpyun any file deleted resulting in injection+getshell-a vulnerability warning-the black bar safety net

Could have been just sent in the Law of the passenger interior, but today saw the official has been fixed, so nothing to hide, just issued. Hope you all learned knowledge, but also want a great God let me write this code, would have been hard to force, require no Agency. phpyun cloud talent syste...

CVE-2013-5885

Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity via unknown vectors related to Audit...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity via unknown vectors related to Audit...

CVE-2013-5885

CVE-2013-5885 affects Oracle Solaris 11.1, specifically the Audit component. The connected sources confirm a local‑privilege/ integrity impact via unknown vectors related to Audit, allowing a local user to affect integrity. The vulnerability is discussed in the Jan 2014 Oracle CPU (SRU11_1_13_6_0...

CVE-2013-5885

Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity via unknown vectors related to Audit...

PT-2014-2977

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.1 Description The issue affects the integrity of the system, related to the Audit component. The exact nature of the vulnerability and the vectors used to exploit it are not specified. Recommendations For Oracle Solar...

CVE-2013-5885: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity via unknown vectors related to Audit...

EMC NetWorker information leakage

Cleartext password in audit reports...

ESA-2013-072: EMC NetWorker Information Disclosure Vulnerability

ESA-2013-072.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-072: EMC NetWorker Information Disclosure Vulnerability EMC Identifier: ESA-2013-072 EMC Identifier: NW152441 CVE Identifier: CVE-2013-3285 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products...

[Lynis v1.3.8] The Unix/Linux Hardening tool

Lynis is a security tool to audit and harden Unix and Linux based systems. It scans the system by performing many security control checks, looks for installed software and determines compliance to standards. Also will it detects security issues and errors in configuration. At the end of the scan ...

Fedora 19 : libgadu-1.12.0-0.2.rc1.fc19 (2013-23517)

From upstream changelog : - Support for Gadu-Gadu 11 protocol. - Enable server certificate verification. - Allow using custom TCP/TLS connection functions. - Allow specifying server by name, not just IP. - Small bugfixes reported by Pidgin project based on Coverity audit. Note that Tenable Networ...

[Faraday] Penetration Test IDE

Faraday introduces a new concept IPE Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the...

[SSL Audit] Remotely scans web servers for SSL support

SSL Audit remotely scans web servers for SSL support, unlike other tools it is not limited to ciphers supported by SSL engines such as OpenSSL or NSS but can detect all known cipher suites. It features an innovative Fingerprinting engine that was never seen before. Fingerprint mode Experimental...

DCE-RPC fragment length field is incorrectly checked.

Description Samba versions 3.4.0 and above versions 3.4.0 - 3.4.17, 3.5.0 - 3.5.22, 3.6.0 - 3.6.21, 4.0.0 - 4.0.12 and including 4.1.2 are vulnerable to buffer overrun exploits in the client processing of DCE-RPC packets. This is due to incorrect checking of the DCE-RPC fragment length in the...

Fedora 19 : lynis-1.3.6-1.fc19 (2013-22768)

1.3.6 2013-12-03 New : - Support for the dntpd time daemon - New Apache test for modules HTTP-6632 - Apache test for modevasive HTTP-6640 - Apache test for modqos HTTP-6641 - Apache test for modspamhaus HTTP-6642 - Apache test for ModSecurity HTTP-6643 - Check for installed package audit tool...

SuSE 11.3 Security Update : Linux kernel (SAT Patch Numbers 8524 / 8525 / 8528)

The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to version 3.0.101 and also includes various other bug and security fixes. The following features have been added : - Drivers: hv: Support handling multiple VMBUS versions FATE314665. - Drivers: hv: Save and export negotiated vmbus...