2862 matches found
[SECURITY] Fedora 21 Update: torque-4.2.8-1.fc21
TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....
CVE-2014-6645
The Batch library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6645
CVE-2014-6645 affects the Batch library for Android, where the SSL/TLS layer does not verify X.509 certificates from servers. This enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. Documented details come from NVD/NVD-relat...
PT-2014-7323
Name of the Vulnerable Software and Affected Versions Batch library for Android affected versions not specified Description The issue concerns the Batch library for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and...
CVE-2014-6645: Undefined Security Weakness
The Batch library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
(Plone): Anonymous users can batch change titles of content items
It was discovered that Plone, included as a part of luci, allowed a remote anonymous user to change titles of content items due to improper permissions checks...
Retrieving all tables and their columns at once MSSQL
In the Name of ALLAH the Most Beneficent and the Merciful Zenodermus, Ch3rn0by1 and Me was workinn on MSSQL.. when Zenodermus thought to make a DIOS for MSSQL.. previously at Код: http://websec.ca/kb/sqlinjection DIOS is under the heading Retrieving Multiple Tables and Columns Код: AND 1=0; BEGIN...
PT-2014-1684
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2008 SP3, 2008 R2 SP2, and 2012 SP1 Description A denial of service issue exists due to improper control of stack memory for processing T-SQL batch commands. This allows remote authenticated users to cause a denia...
CVE-2014-4061: Undefined Security Weakness
Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service daemon hang via a crafted T-SQL statement, aka "Microsoft SQL Server Stack Overrun...
Opera 7.22 - File Creation and Execution Exploit (Webserver)
No description provided by source. !/usr/bin/perl Sample code of Opera 7 Arbitrary File Auto-Saved Vulnerability. This Exploit will run a webserver that will create and execute a batch file on the victim's computer when visiting this malicious server This perl script is a small HTTP server for a...
Metainfo Sendmail 2.0/2.5,MetaIP 3.1
No description provided by source. source: http://www.securityfocus.com/bid/110/info MetaInfo www.metainfo.com puts out many NT service products, including MetaIP DHCP/DNS manager and Sendmail Unix port. Both products allow remote administration via Web UIs, and MetaIP uses Java to communicate ba...
Wordpress Top Quark Architecture 2.10 - Arbitrary File Upload Vulnerability
No description provided by source. Exploit Title: Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://topquark.com/ Software...
ManageEngine Applications Manager Authenticated Code Execution
No description provided by source. $Id: manageengineappsmngr.rb 12281 2011-04-08 14:06:10Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Sambar Server 4.2 beta 7 Batch CGI Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1002/info The Sambar Web/FTP/Proxy Server for Windows NT and 2000 supports DOS-style batch programs as CGI scripts. A remote attacker can use any batch file used by the server in the 'cgi-bin' directory to run any valid...
Oracle Web Listener 4.0 .x for NT Batch File Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1053/info Oracle Web Listener for NT makes use of various batch files as cgi scripts, which are stored in the /ows-bin/ directory by default. Any of these batch files can be used to run arbitrary commands on the server,...
Chilkat Software FTP2 ActiveX Component Remote Code Execution
No description provided by source. !-- Chilkat Software FTP2 ActiveX Component ChilkatFtp2.DLL 2.6.1.1 Remote Code Execution poc by rgod tested against Internet Explorer 7 on Vista should also work with 8/9 ActiveX Settings: CLSID: 302124C4-30A0-484A-9C7A-B51D5BA5306B Progid:...
Apache Win32 1.3.x/2.0.x Batch File Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4335/info Special characters such as | may not be filtered by the batch file handler when a web request is made for a batch file. As a result, a remote attacker may be able to execute arbitrary commands on the host runnin...
Threat Outbreak Alert RuleID10392: Email Messages Distributing Malicious Software on June 20, 2014
Medium Alert ID: 34680 First Published: 2014 June 20 19:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10392 may contain the following files: Name | Siz...
Debian Security Advisory DSA 2936-1 (torque - security update)
John Fitzpatrick from MWR Labs reported a stack-based buffer overflow vulnerability in torque, a PBS-derived batch processing queueing system. An unauthenticated remote attacker could exploit this flaw to execute arbitrary code with root privileges. OpenVAS Vulnerability Test $Id: deb2936.nasl 67...