firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2015:0046 Updated firefox packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring...

Critical: Red Hat Security Advisory: firefox security and bug fix update

Updated firefox packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Broken Link Checker <= 1.10.2 - Stored XSS

Broken Link Checker is vulnerable to stored XSS again. The plugin don’t check the links on their validity. Very bad: JavaScript code is a valid link. Example: Link. Malicious JavaScript can be injected by any post author. Screenshots: http://imgur.com/mTEobu7 / http://imgur.com/3z8GmL0 /...

Broken Link Checker 1.10.1 - Authenticated Stored XSS

On the "Settings Link Checker Which Links To Check" screen, the input field 'exclusionlist' is saved without any validation. Malicious JavaScript can be injected. Screenshots: http://imgur.com/PsvPQRy http://imgur.com/nH6GdVN...

WordPress Broken Link Checker Plugin <= 1.10.1 - Stored XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Broken Link Checker Plugin <= 1.10.1 - Stored XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

PHP Secure Configuration Checker - Check current PHP configuration for potential security flaws

Among the most tedious tasks of PHP security testing is the check for insecure PHP configuration. As a successor of our PHP Security Poster, we have created a script to help system administrators as well as security professionals to assess the state of php.ini and related topics as quickly and as...

Broken Link Checker 1.9.1 - Bulk Action Form URL H&ling XSS

The Broken Link Checker WordPress plugin was affected by a Bulk Action Form URL H XSS security vulnerability...

WordPress Broken Link Checker Plugin <= 1.9.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...

WordPress Broken Link Checker Plugin <= 1.9.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...

Dogfood CRM spell.php Remote Command Execution

No description provided by source. $Id: dogfoodspellexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Microsoft Office Chinese Grammar Checker Insecure Library Loading (MS14-023; CVE-2014-1756)

An insecure library loading vulnerability has been reported in Microsoft Office proofing tools. The vulnerability is due to the way that the Chinese Simplified Grammar Checker component handles the loading of dynamic-link library .dll files. A remote attacker could exploit this vulnerability by...

Parsero v0.75 - Attacking Robots.txt Files

Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries tell the search engines what directories or files hosted on a web server mustn't be indexed. For example, "Disallow: /portal/login" means that the...

Microsoft Office Remote Code Execution Vulnerabilities (2961037)

This host is missing an important security update according to Microsoft Bulletin MS14-023. OpenVAS Vulnerability Test $Id: gbms14-023.nasl 6735 2017-07-17 09:56:49Z teissa $ Microsoft Office Remote Code Execution Vulnerabilities 2961037 Authors: Antu Sanadi Copyright: Copyright C 2014 Greenbone...

Microsoft Office Remote Code Execution Vulnerabilities (2961037)

This host is missing an important security update according to Microsoft Bulletin MS14-023. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Exploit for Out-of-bounds Read in Openssl

Heartbleed ========== A checker site and tool for CVE-2014-01...

Fedora Update for seamonkey FEDORA-2014-2324

Check for the Version of seamonkey OpenVAS Vulnerability Test Fedora Update for seamonkey FEDORA-2014-2324 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[Blue|Smash] Bluetooth Penetration Testing Suite

Blue|Smash is a free open source bluetooth pentest suite, powered by python for linux. I built Blue|Smash to aid me in my bluetooth adventures and thought others might benefit from my work :D. Here is a list of some of the tools included. Sorbo's Frontline bluetooth sniffer. A bruteforce scanner...

[jSQL Injection v0.5] Java tool for automatic database injection

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. jSQL Injection change log - version 0.5 0.5 SQL shell Uploader 0.4 Admin page checker and preview Brute forcer md5...

Security releases: Symfony 2.0.24, 2.1.12, 2.2.5, and 2.3.3 released

Log in to add a reaction to this post add a reaction ❤️ 👍 🚀 Symfony 2.0.24, 2.1.12, 2.2.5, and 2.3.3 have just been released and they contain security fixes for the Validator component CVE-2013-4751 and the HttpFoundation component CVE-2013-4752. Even if Symfony 2.0 and 2.1 are out of maintenance,...