PT-2014-8327

Name of the Vulnerable Software and Affected Versions HP Helion Cloud Development Platform version 1.0 Description The issue allows remote attackers to execute arbitrary code by leveraging the same security keys used across different customers' installations when a virtual machine is derived from...

MGASA-2014-0442 Updated apt packages fix security vulnerability

The Google Security Team discovered a buffer overflow vulnerability in the HTTP transport code in apt-get. An attacker able to man-in-the-middle a HTTP request to an apt repository can trigger the buffer overflow, leading to a crash of the "http" apt method binary, or potentially to arbitrary cod...

Updated apt packages fix security vulnerability

The Google Security Team discovered a buffer overflow vulnerability in the HTTP transport code in apt-get. An attacker able to man-in-the-middle a HTTP request to an apt repository can trigger the buffer overflow, leading to a crash of the "http" apt method binary, or potentially to arbitrary cod...

RHEL 5 / 6 / 7 : java-1.6.0-sun (RHSA-2014:0908)

Updated java-1.6.0-sun packages that fix several security issues are now available for Oracle Java for Red Hat Enterprise Linux 5, 6, and 7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

CVE-2014-8665

The SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive information by reading unspecified files...

Information disclosure

The SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive information by reading unspecified files...

Cross site scripting

Cross-site scripting XSS vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8665

Technical details for CVE-2014-8665 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2014-8667

Technical details (affected product versions, root cause, exploit vectors) are not publicly available in the provided documents. Monitor for updates from the listed sources.

CVE-2014-8667

Cross-site scripting XSS vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

November 2014 Microsoft Patch Tuesday Security Bulletins

Microsoft today provided its Patch Tuesday advanced notification, giving IT managers a head’s up about 16 bulletins that are scheduled to be delivered next week, including five rated critical for remote code execution and privilege escalation issues. The heavy patch load is an anomaly for 2014,...

CVE-2014-8665: Exposure of Sensitive Information to an Unauthorized Actor

The SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive information by reading unspecified files...

PT-2014-8671

Name of the Vulnerable Software and Affected Versions SAP Business Intelligence Development Workbench affected versions not specified Description The issue allows remote attackers to obtain sensitive information by reading unspecified files. Recommendations At the moment, there is no information...

CVE-2014-8667: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-8673

Name of the Vulnerable Software and Affected Versions SAP HANA Web-based Development Workbench affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML, potential...

OWASP OWTF 1.0.1 - Offensive Web Testing Framework

OWASP OWTF, the Offensive Web Testing Framework, is an OWASP+PTES-focused try to unite great tools and make pen testing more efficient.OWASP OWTF, the Offensive Web Testing Framework, is an OWASP+PTES-focused try to unite great tools and make pen testing more efficient. OWTF aims to make pen...

VoIP Penetration Testing Kit: Viproy

Viproy Voip Pen-Test Kit provides penetration testing modules for VoIP networks. It supports signalling analysis for SIP and Skinny protocols, IP phone services and network infrastructure. Viproy 2.0 is released at Blackhat Arsenal USA 2014 with TCP/TLS support for SIP, vendor extentions support,...

[SECURITY] Fedora 19 Update: perl-Mojolicious-5.49-1.fc19

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...

libpurple/pidgin -- multiple vulnerabilities

The pidgin development team reports:...

CVE-2014-7766

The CVE-2014-7766 entry concerns the Android app The 7 Habits Personal Development (appinventor.ai_ingka_d_jiw.TheCompleteGuideToApplyingThe7HabitsInHolisticPersonalDevelopment) v1.0, which does not verify X.509 certificates when connecting to SSL servers. This enables man-in-the-middle attackers...