738 matches found
[SECURITY] Fedora 22 Update: python3-3.4.2-8.fc22
Python 3 is a new version of the language that is incompatible with the 2.x line of releases. The language is mostly the same, but many details, especi ally how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been remov...
RSPET - Python Reverse Shell and Post Exploitation Tool
RSPET Reverse Shell and Post Exploitation Tool is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario. Features Remote Command Execution Trafic masking XORed insted of cleartext; for better results use port 4431 Built-in File/Binary transfer both...
PHP Built-in HTTP Server File Inclusion Vulnerability
PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community.PHP ZipArchive is an extension class that comes with PHP that enables compression and decompression of ZIP files. A...
Raspberry Pi 3 — New $35 MicroComputer with Built-in Wi-Fi and Bluetooth
While celebrating its computer's fourth birthday, the Raspberry Pi Foundation has launched a brand new Raspberry Pi today. Great news for all Micro-computing fans – A new, powerful Raspberry Pi 3 Model B in town. Months after introducing just $5 Raspberry Pi Zero, Raspberry Pi Foundation has...
TCP Profiles on NetScaler
TCP configurations for a NetScaler appliance can be specified in an entity called a TCP profile, which is a collection of TCP settings. The TCP profile can then be associated with services or virtual servers that want to use these TCP configurations. Built-in TCP Profiles For convenience of...
Idera Up.time agent for Windows Information Disclosure Vulnerability
Idera Up.time client for Windows is a Windows-based infrastructure performance monitoring software client from Idera Corporation. An information disclosure vulnerability exists in Idera Up.time client for Windows 7.6 and earlier. A remote attacker can exploit this vulnerability by sending built-i...
CVE-2015-8227: Improper Input Validation
The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message...
Firefox 41 integrates Free Built-in Instant Messaging and Video Chat to Your Browser
Mozilla launches Voice and Video Connect with the release of Official Firefox 41.0 Release. After significant improvements done in the Firefox Nightly experimental build of version Firefox 41.0, the stable release has a lot to offer. How would it be experiencing a seamless communication – video a...
Dedicated Micros DVR products use plaintext protocols and require no password by default
Overview Dedicated Micros DVR products, including the DV-IP Express, SD Advanced, SD, EcoSense, and DS2, by default use plaintext protocols and require no password. Description CWE-311: Missing Encryption of Sensitive Data Dedicated Micros DVR products by default use HTTP, telnet, and FTP rather...
GE Healthcare Centricity Analytics Server Built-in Account Vulnerability
GE Healthcare Centricity Analytics Server is a suite of imaging analytics solutions for the healthcare industry. GE Healthcare Centricity Analytics Server has built-in accounts, sa users use the 'V0yag3r' password, analyst uses the G3car3s password, ccg uses the G3car3s password, viewer uses the...
GE Healthcare CADStream Server Built-in Account Vulnerability
GE Healthcare CADStream Server is a suite of applications used in the healthcare industry and provides automated analysis and reporting for magnetic resonance imaging. GE Healthcare CADStream Server has built-in accounts, and admin uses 'confirma' passwords, allowing remote attackers to utilize...
GE Healthcare Optima MR360 HIPAA Configuration Interface Built-in Account Vulnerability
GE Healthcare CADStream Server is a suite of applications used in the healthcare industry and provides automated analysis and reporting for magnetic resonance imaging. Built-in accounts exist for the GE Healthcare Optima MR360 HIPAA configuration interface, with the root account using the...
GE Healthcare Centricity PACS Server Built-in Account Vulnerability
GE Healthcare Centricity PACS is the company's suite of image archiving and delivery systems for the healthcare industry. GE Healthcare Centricity PACS Server exists with built-in accounts, nasro with a password of nasro and nasrw with a password of nasrw, allowing a remote attacker to take contr...
GE Healthcare Centricity PACS-IW Built-in Account Vulnerability
GE Healthcare Centricity PACS-IW is an image archiving and delivery system for the healthcare industry. Built-in accounts exist for GE Healthcare Centricity PACS-IW, with 'shared' passwords for shared users; and 'scan' passwords for scan users, allowing remote attackers to to utilize these accoun...
GE Healthcare Centricity PACS-IW Built-in Account Vulnerability (CNVD-2015-05174)
GE Healthcare Centricity PACS-IW is an image archiving and delivery system for the healthcare industry. GE Healthcare Centricity PACS-IW has built-in accounts for sa users with 'A11enda1e' passwords, allowing remote attackers to take control of the device using these accounts...
GE Healthcare Precision MPi Built-in Account Vulnerability
GE Healthcare Precision MPi is an MPi system for the healthcare industry. GE Healthcare Precision MPi has built-in accounts; serviceapp users use the 'orion' password; clinical operator users use the 'orion' password; and administrator users use the 'PlatinumOne' password, allowing remote attacke...
GE Healthcare Centricity PACS Workstation Built-in Account Vulnerability
GE Healthcare Centricity PACS Workstation is a General Electric image archiving and transfer system workstation for the healthcare industry. GE Healthcare Centricity PACS Workstation includes built-in accounts for Administrator users with the 'CANal1' password and IIS users with the 'iis '...
GE Healthcare Revolution XQ/i Built-in Account Vulnerability
Acquisition Workstation for the GE Healthcare Revolution XQ/i is a digital radiography acquisition workstation for the healthcare industry. The Acquisition Workstation for the GE Healthcare Revolution XQ/i has built-in accounts, and the sdc uses 'adw3.1' passwords, allowing remote attackers to ta...
Debian DLA-272-1 : python-django security update
Several vulnerabilities were discovered in Django, a high-level Python web development framework : CVE-2015-2317 Daniel Chatfield discovered that python-django, a high-level Python web development framework, incorrectly handled user-supplied redirect URLs. A remote attacker could use this flaw to...
[SECURITY] [DLA 272-1] python-django security update
Package : python-django Version : 1.2.3-3+squeeze13 CVE ID : CVE-2015-2317 CVE-2015-5143 CVE-2015-5144 Several vulnerabilities were discovered in Django, a high-level Python web development framework: CVE-2015-2317 Daniel Chatfield discovered that python-django, a high-level Python web developmen...