5497 matches found
MGASA-2013-0330 Updated python-scipy packages fix a security vulnerability and missing deps
Updated python-scipy package fixes security vulnerability: scipy.weave will use /tmp/username as persistent storage cache, but it does not check whether or not this directory already exists, does not check whether it is a directory or a symlink, and also does not verify permissions or ownership,...
Updated python-scipy packages fix a security vulnerability and missing deps
Updated python-scipy package fixes security vulnerability: scipy.weave will use /tmp/username as persistent storage cache, but it does not check whether or not this directory already exists, does not check whether it is a directory or a symlink, and also does not verify permissions or ownership,...
IT-Grundschutz M4.331: Sichere Konfiguration des Betriebssystems für einen Samba-Server
IT-Grundschutz M4.331: Sichere Konfiguration des Betriebssystems für einen Samba-Server ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94237 Stand: 13...
Fedora 20 : libvirt-1.1.3.1-1.fc20 (2013-20869)
Rebased to version 1.1.3.1 - CVE-2013-4400: virt-login-shell arbitrary file overwrites vulnerability bz 1015228, bz 1025685 - Fix possible domain disappearance on libvirtd crash bz 1015246 - Fix LXC container startup failure bz 1014847 - Slim down libvirt LXC dependencies bz 1012198 Note that...
SuSE 11.3 Security Update : mysql, mysql-client (SAT Patch Number 8364)
This version upgrade of mysql to 5.5.33 fixed multiple security issues : - CVE-2013-1861 / CVE-2013-3783 / CVE-2013-3793 / CVE-2013-3794 - CVE-2013-3795 / CVE-2013-3796 / CVE-2013-3798 / CVE-2013-3801 - CVE-2013-3802 / CVE-2013-3804 / CVE-2013-3805 / CVE-2013-3806 - CVE-2013-3807 / CVE-2013-3808 ...
[Binrev] Automate Reversing Windows Binaries for Pentesters
What you can do with this? Static analysis: you can do a basic manual code review for decompiled sources to discover hidden communication channels, search for hard-coded passwords, or SQL injection vulnerabilities. Import decompiled projects to an IDE to reconstruct and modify the original source...
SuSE 11.3 Security Update : MySQL (SAT Patch Number 8217)
This version upgrade of mysql to 5.5.32 fixes multiple security issues : CVE-2013-1861 / CVE-2013-3783 / CVE-2013-3793 / CVE-2013-3794 / CVE-2013-3795 / CVE-2013-3796 / CVE-2013-3798 / CVE-2013-3801 / CVE-2013-3802 / CVE-2013-3804 / CVE-2013-3805 / CVE-2013-3806 / CVE-2013-3807 / CVE-2013-3808 /...
Fedora Update for php-symfony2-Validator FEDORA-2013-14590
Check for the Version of php-symfony2-Validator OpenVAS Vulnerability Test Fedora Update for php-symfony2-Validator FEDORA-2013-14590 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...
[SECURITY] Fedora 19 Update: php-symfony2-HttpFoundation-2.2.5-1.fc19
The HttpFoundation Component defines an object-oriented layer for the HTTP specification. In PHP, the request is represented by some global variables $GET, $POST, $FILE, $COOKIE, $SESSION... and the response is generated by some funct ions echo, header, setcookie, .... The Symfony2 HttpFoundation...
[SECURITY] Fedora 19 Update: npm-1.3.3-1.fc19
npm is a package manager for node.js. You can use it to install and publish your node programs. It manages dependencies and does other cool stuff...
[SECURITY] Fedora 18 Update: npm-1.3.3-1.fc18
npm is a package manager for node.js. You can use it to install and publish your node programs. It manages dependencies and does other cool stuff...
Fedora 18 : nodejs-normalize-package-data-0.2.0-1.fc18 / node-gyp-0.10.6-1.fc18 / etc (2013-11780)
This update provides the latest npm and updates its dependencies. It also fixes a minor security bug. For more information about recent changes in npm, see the changelog at GitHub: https://github.com/isaacs/npm/commits/v1.3.3 Additionally, this update restricts all included packages to only the...
SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 7981)
This update to IcedTea-Web 1.4 provides the following fixes and enhancements : - Security updates - RH916774: Class-loader incorrectly shared for applets with same relative-path. CVE-2013-1926 - RH884705: fixed gifar vulnerabilit. CVE-2013-1927 - RH840592: Potential read from an uninitialized...
[SECURITY] Fedora 19 Update: gegl-0.2.0-11.fc19
GEGL Generic Graphics Library is a graph based image processing framework. GEGLs original design was made to scratch GIMPs itches for a new compositing and processing core. This core is being designed to have minimal dependencies. and a simple well defined API...
[SECURITY] Fedora 17 Update: gegl-0.2.0-11.fc17
GEGL Generic Graphics Library is a graph based image processing framework. GEGLs original design was made to scratch GIMPs itches for a new compositing and processing core. This core is being designed to have minimal dependencies. and a simple well defined API...
hash_analysis
This plugin identifies hashes in HTTP responses. Plugin type Grep Options This plugin doesnt have any user configured options. Source For more information about this plugin and the associated tests, theres always the source code to understand exactly whats under the hood: Plugin source code...
google_spider
This plugin finds new URLs using google. It will search for "site:domain.com" and do GET requests all the URLs found in the result. One configurable parameter exists: resultlimit Plugin type Crawl Options Name | Type | Default Value | Description | Help ---|---|---|---|--- resultlimit | integer |...
wsdl_finder
This plugin finds new web service descriptions and other web service related files by appending "?WSDL" to all URLs and checking the response. Plugin type Crawl Options This plugin doesnt have any user configured options. Source For more information about this plugin and the associated tests,...
generic
This authentication plugin can login to web application with generic authentication schema. Seven configurable parameters exist: username password usernamefield passwordfield authurl checkurl checkstring Plugin type Auth Options Name | Type | Default Value | Description | Help ---|---|---|---|---...
analyze_cookies
This plugin greps every response for session cookies that the web application sends to the client, and analyzes them in order to identify potential vulnerabilities, the remote web application framework and other interesting information. Plugin type Grep Options This plugin doesnt have any user...