9562 matches found
MGASA-2014-0553 Updated erlang packages fix security vulnerabilities
Updated erlang packages fixes security vulnerability: An FTP command injection flaw was found in Erlang's FTP module. Several functions in the FTP module do not properly sanitize the input before passing it into a control socket. A local attacker can use this flaw to execute arbitrary FTP command...
OracleVM 2.2 : xen (OVMSA-2014-0028)
The remote OracleVM system is missing necessary patches to address critical security updates : - Backport xend: disable sslv3 due to CVE-2014-356 19831405 - libxc: Support set affinity for more than 64 CPUs 18938789 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this...
PHP 5.x / Bash Shellshock Proof of Concept
This is a proof of concept that demonstrates how the Bash shellshock vulnerability can be used in PHP to bypass disablefunctions, safemode, etc...
SuSE 11.3 Security Update : openwsman (SAT Patch Number 9902)
This update adds a configuration option to disable SSLv2 and SSLv3 in openwsman. This is required to mitigate CVE-2014-3566. To use the new option, edit /etc/openwsman/openwsman.conf and add the following line to the server section : ssldisabledprotocols = SSLv2 SSLv3 %NASLMINLEVEL 70300 C Tenabl...
ZXDSL 831CII Cross Site Request Forgery
ZXDSL 831CII Disable Access from Local network CSRF Disable from: Telnet Web Browser SNMP Ping FTP TFTP The following link will make a logged in admin disable all access from lan. which makes the modem unaccessable...
[BSA-099] Security update for libreofice
Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2014-3693: Use-After-Free in socket manager of Impress Remote It was discovered that LibreOffice 4.0.0 and later does not manage the port 1599 for the LibreOffice Impress correctly. An external...
Multiple IQ Invisions Products Command Injection Vulnerability (Nov 2014)- Active Check
Multiple IQ Invisions products are prone to a command injection vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
PHP 5.6.2 - Shellshock Safe Mode Disable Functions Bypass Command Injection
PHP 5.6.2 - Shellshock Safe Mode Disable Functions Bypass Command Injection Exploit Title: PHP 5.x Shellshock Exploit bypass disablefunctions Google Dork: none Date: 10/31/2014 Exploit Author: Ryan King Starfall Vendor Homepage: http://php.net Software Link:...
PHP 5.6.2 - Shellshock Safe Mode disable_functions Bypass Command Injection
PHP 5.6.2 - Shellshock Safe Mode disablefunctions Bypass Command Injection Exploit Title: PHP 5.x Shellshock Exploit bypass disablefunctions Google Dork: none Date: 10/31/2014 Exploit Author: Ryan King Starfall Vendor Homepage: http://php.net Software Link:...
CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw
Description of Problem The recently disclosed protocol flaw in SSLv3, referred to as CVE-2014-3566 or POODLE, could expose some deployments that support SSLv3 to a risk of an active Man in the Middle MITM attack. A successful attack could lead to the disclosure of the information that is being se...
PT-2014-1743 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the patchday that contains the fix for the vulnerability Description: The issue is related to the improper handling of TrueType fonts by the kernel-mode driver in Windows, allowing remote attackers to execu...
PT-2014-1863 · Red Hat +1 · 389-Ds-Base-Debuginfo +5
Name of the Vulnerable Software and Affected Versions: 389-ds-base versions 1.3.1.6 389-ds-base-debuginfo versions 1.3.1.6 389-ds-base-devel versions 1.3.1.6 389-ds-base-libs versions 1.3.1.6 Description: The issue allows remote attackers to obtain sensitive replicated metadata by searching the...
WordPress Diary Theme - Email Spoofing
Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...
WordPress JournalCrunch Theme - Email Spoofing
Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...
WordPress RockWell Theme - Email Spoofing
Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...
WordPress Designpile Theme - Email Spoofing
Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...
WordPress Wise Theme - Email Spoofing
Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...
WordPress Webfolio Theme - Email Spoofing
Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...