[SECURITY] Fedora 21 Update: abrt-2.3.0-7.fc21

abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality...

[SECURITY] Fedora 22 Update: abrt-2.6.0-1.fc22

abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality...

Updated pngcrush package fixes security vulnerability

pngcrush-1.7.84 fixes defects reported by Coverity-scan, so it should be more resistant to crashes due to malformed input files, such as the one presented in CVE-2015-2158...

China Mobile: branch of memory management vulnerabilities and defects rectification process-vulnerability warning-the black bar safety net

1 2 Month 1 0 day morning news for CCTV the focus of the recently exposed the Mudanjiang mobile and Jilin Unicom Chaos snap user value-added service cost, China Mobile yesterday released a statement saying, it has been found Mudanjiang moving in the management loopholes and defects, serious...

TIBCO Security Advisory: October 29, 2014 - TIBCO® Managed FileTransfer

TIBCO® Managed File Transfervulnerabilities Original release date: October 29, 2014 Last revised: -- CVE-2014-7194 Source: TIBCO SoftwareInc. TIBCO Managed File Transfer vulnerabilities Original release date: October 29, 2014 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO...

U-Mail Mail Service system arbitrary file upload+execution vulnerabilities runtime defects and authentication bypass）-bug warning-the black bar safety net

Brief description: PRODUCT DESCRIPTIONtaken from website U-Mail focus on email field 1 to 5 years, for enterprises to easily build the most secure and stable e-mail system software. Keywords: 1 5 years the safest most stable 1 5 year the safest and most stable , woxaole,so wonderful code, so...

Debian DSA-3012-1 : eglibc - security update

Tavis Ormandy discovered a heap-based buffer overflow in the transliteration module loading code in eglibc, Debian's version of the GNU C Library. As a result, an attacker who can supply a crafted destination character set argument to iconv-related character conversation functions could achieve...

Than imagined more terror! OpenSSL“effort”vulnerability in-depth analysis-vulnerability warning-the black bar safety net

Author: yaoxi original source http://blog.wangzhan.360.cn/ Recently, OpenSSL broke this year's most serious security vulnerability in the hacker community is named“heart bleed”vulnerability. 3 6 0 site Guard security team of the vulnerability analysis, the vulnerability is not only related to htt...

Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20130805)

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding...

Mobile microblog SQL injection and 1 3 9 mailbox defects,can enter others 1 3 9 mailbox-vulnerability warning-the black bar safety net

Mobile modest system underSQL injection, and did not attempt cross-database 1 3 9 mailbox password to retrieve defect Implantation where the parameters appkey Such as:...

DSA-2581-1 mysql-5.1 - several

Bulletin has no description...

Notepad Dog microblogging V3. 6. 1 Build 2 0 A 1 2 0 7 1 8 background to get shell-vulnerability warning-the black bar safety net

Notepad Dog microblogging system, the background presence of design defects that can lead to get backstage access to the shell Version: V3. 6. 1 Build 2 0 a 1 2 0 7 1 8 1. System Tools-data backup-custom backup-select a data amount smaller table-more options-select compress backup...

NetCat CMS multiple defects and repair-vulnerability warning-the black bar safety net

Title: NetCat CMS Code exec, SQL-injection Author: brainpillow Official website: http://netcat.ru/ The defects of the present cms version are valid: ======================================================= Sql injection: www.badguest.cn /search/?...

isc-dhcp-server -- server halt upon processing certain packets

ISC reports: A pair of defects cause the server to halt upon processing certain packets. The patch is to properly discard or process those packets...

Security Advisory: CVE-2011-2465 ISC BIND 9 Remote Crash with Certain RPZ Configurations

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ISC BIND 9 Remote Crash with Certain RPZ Configurations Two defects were discovered in ISC's BIND 9 code. These defects only affect BIND 9 servers which have recursion enabled and which use a specific feature of the software known as Response Policy...

VietNext cms multiple defects and repair-vulnerability warning-the black bar safety net

Exploit Title:Multiple Vulnerabilities + Date: 2 0 1 1 + script:VietNext cms + Software: http://vietnextco.com & amp; http://vietnext.vn + Author : pentesters. ir + Website : WwW.PenTesters.IR + dorks :"Developed & Design By VietNext" and "Design by VietNext"...

October, 2006: 9.6 million Sony batteries recalled after reports of overheating

This was just the first in what would prove to be a string of embarrassments to the Japanese firm over the manufacture of laptop batteries. It began with reports in both Japan and the U.S. about Sony-manufactured lithium ion batteries that were overheating and, in some cases, bursting into flames...

CVE-2011-0732: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM Tivoli Integrated Portal TIP 1.1.1.1, as used in IBM Tivoli Common Reporting TCR 1.2.0 before Interim Fix 9, have unknown impact and attack vectors, related to "security vulnerabilities of Websphere Application Server bundled within" and "many internal...

Respect The Fuzzer

This image from Charlie Miller’s CanSecWest presentation credit InfoSec Events shows how a small home-brewed fuzzing tool found multiple exploitable vulnerabilities in Apple’s Preview, Microsoft’s PowerPoint and OpenOffice. At the Pwn2Own contest, all the vulnerabilities used in the winning...

Mac OS X Mega-Update Fixes 33 Security Defects

Apple today shipped another Mac OS X mega-update with fixes for at least 33 serious security problems affecting Mac OS X users. The update includes patches for third party components like Adobe’s Flash Player plug-in, Clam AV, MySQL and PHP. A separate update was released for Snow Leopard to fix...