9571 matches found
Apple starts downloading MacOS Sierra automatically to your MacBook — Here's How to Stop It
Are you experiencing slow Internet speed on your MacBook today? — It's not just you! Here's Why: Following in Microsoft's footsteps, Apple has started "pre-downloading" the latest version of its desktop operating system, macOS 10.12 Sierra, in the background, if you are still running OS X El...
PT-2016-7314 · Php +3 · Adodb Library +3
Name of the Vulnerable Software and Affected Versions: ADODB Library for PHP versions prior to 5.20.7 Description: The issue allows remote attackers to conduct SQL injection attacks due to incorrect quoting in the qstr method of the PDO driver. This can be exploited via vectors related to the...
Street Fighter 5 - Capcom.sys Kernel Execution (Metasploit)
Street Fighter 5 - Capcom.sys Kernel Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule...
Error when trying to disable HA on XenServer
When trying to disable HA for the pool, we are getting the following error xe pool-ha-disableThe uuid you supplied was invalid.type: VDIuuid: 87ca6afc-b0ad-4e54-bb5e-313dddd77ea2...
How to Disable Power Management
To disable power management for a Delivery Group...
How to Move Replica Metadata
Purpose This article documents the procedure for moving replica metadata between repositories. While moving the replica metadata is not required when changing which repository a replication job uses, moving the metadata will eliminate the need for a lengthy "calculating disk digest" task after th...
SUSE-SU-2016:2385-1 Security update for libtcnative-1-0
This update for libtcnative-1-0 fixes the following issues: - CVE-2015-4000: Disable 512-bit export-grade cryptography to prevent Logjam vulnerability bsc938945...
PT-2016-6889 · Cisco · Cisco Pix +3
Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions through 3.18S Cisco IOS XR versions 4.3.x and 5.0.x through 5.2.x Cisco PIX versions prior to 7.0 Description: A vulnerability in Internet Key Exchange version 1...
Cisco ASA 9.2(3) - 'EXTRABACON' Authentication Bypass
Cisco ASA 9.23 Authentication Bypass EXTRABACON Module Copyright: c 2016 RiskSense, Inc. https://risksense.com License: http://opensource.org/licenses/MIT Release Date: September 15, 2016 Authors: Sean Dillon 2E3C8D72353C9B8C9FF797E753EC4C9876D5727B Zachary Harding...
Receiver for windows- Disable Remember password option
Receiver for windows 4.4 - Disable Remember password option...
ntp security update
4.2.6p5-22.0.1.el72.2 - add disable monitor to default ntp.conf CVE-2013-5211...
ntp security update
4.2.6p5-10.0.1.el68.1 - add disable monitor to default ntp.conf CVE-2013-5211...
SOL10133477 - BIG-IP IPsec IKE peer listener vulnerability CVE-2016-5736
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Multiple Vendors '/servlets/FetchFile' Multiple Vulnerabilities - Active Check
Multiple vulnerabilities affecting the remote device have been found, these vulnerabilities allows uploading of arbitrary files and their execution, arbitrary file download with directory traversal, use of a weak algorithm for storing passwords and session hijacking. SPDX-FileCopyrightText: 2016...
Proxy auto-config (PAC) files have access to full HTTPS URLs
Overview Web proxy auto-config PAC files are passed the full HTTPS URL in GET requests which may expose sensitive data. Description CWE-212: Improper Cross-boundary Removal of Sensitive Data - CVE-2016-5134 Google, CVE-2016-1801 AppleWeb proxy auto-configuration files proxy.pac have access to the...
POODLE: SSLv3 Vulnerability - Lenovo Support US
No description provided...
Untangle NG Firewall RCE Vulnerability
The remote Untangle NG Firewall is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2016-3244 · Apache +2 · Apache Xml-Rpc Library +2
Name of the Vulnerable Software and Affected Versions: Apache XML-RPC library version 3.1.3 Description: The issue allows remote attackers to execute arbitrary code via a crafted serialized Java object in an element. This is due to the library's failure to properly verify data from external...
Lenovo ThinkPad BIOS System Management Mode Arbitrary Code Execution Vulnerability
BIOS Basic Input/Output System i.e. Basic Output Input System is the most basic software code loaded on the computer hardware system. The Lenovo ThinkPad BIOS has a security vulnerability that can be exploited by an attacker with local administrative access to execute arbitrary code, disable flas...
Option CloudGate Insecure Direct Object References And XSS Vulnerabilities
Option CloudGate is prone to cross site scripting and insecure direct object reference authorization bypass vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...