PT-2014-2189

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.34.1 Description A directory traversal issue exists, allowing remote authenticated users to execute arbitrary PHP code. This is achieved by including a .. dot dot in the pkg parameter within a...

PT-2014-2190

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.32.11 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters into the dtcpkg directory parameter in a do install action...

RedHat Update for sudo RHSA-2014:0266-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2014-2628

Name of the Vulnerable Software and Affected Versions Umisoft UMI.CMS versions prior to 2.9 build 21905 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to...

CVE-2013-2754: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/...

PT-2014-4324

Name of the Vulnerable Software and Affected Versions MyBB versions 1.6.12 and earlier Description A cross-site scripting XSS issue exists due to improper handling of the keywords parameter in a do search action, allowing remote attackers to inject arbitrary web script or HTML. This occurs when a...

PT-2014-4284

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.5 through 4.1.6.1 Xen versions 4.2.2 through 4.2.3 Xen version 4.3.x Description The issue concerns the do physdev op function, which does not properly restrict access to the PHYSDEVOP prepare msix and PHYSDEVOP release msix...

CVE-2013-2819

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted 1 update or 2 reprogramming action...

Deserialization of untrusted data

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted 1 update or 2 reprogramming action...

Design/Logic Flaw

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388...

CVE-2013-2819

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted 1 update or 2 reprogramming action...

CVE-2013-2820

CVE-2013-2820 affects Sierra Wireless AirLink Raven X EV-DO gateways (firmware versions V4221_4.0.11.003 and V4228_4.0.11.003). The vulnerability allows remote replay attacks that reprogram the device firmware via UDP ports 17336 and 17388, potentially impacting availability and function. ICS-CER...

CVE-2013-2819

The Sierra Wireless AirLink Raven X EV-DO gateway (versions V4221_4.0.11.003 and V4228_4.0.11.003) is affected by CVE-2013-2819 due to missing encryption of the update/reprogramming process and use of plain text credentials, enabling remote firmware reprogramming and potential denial of service. ...

PT-2014-2635

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink Raven X EV-DO gateway versions 4221 4.0.11.003 through 4221 4.0.11.003 Sierra Wireless AirLink Raven X EV-DO gateway versions 4228 4.0.11.003 through 4228 4.0.11.003 Description The issue allows remote attackers to...

PT-2014-2636

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink Raven X EV-DO gateway versions 4221 4.0.11.003 and 4228 4.0.11.003 Description The issue allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388. Recommendations For version...

CVE-2013-2820: Improper Authentication

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388...

CVE-2013-2819: Undefined Security Weakness

The Sierra Wireless AirLink Raven X EV-DO gateway 42214.0.11.003 and 42284.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted 1 update or 2 reprogramming action...

PT-2014-1874

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.4.17 Description The issue affects memcached, allowing remote attackers to cause problems with the confidentiality, integrity, and availability of protected information. A specific problem is in the do item get...

CVE-2013-6183

CVE-2013-6183 is rejected/not used per the Initial Description.

Dennis Fisher and Mike Mimoso Discuss Do Not Track, We Are the Cavalry and more

Dennis Fisher and Mike Mimoso discuss the major security stories of the last two weeks, including the BGP route hijacking, why Do Not Track doesn’t work and the We Are the Cavalry movement. Download: digitalunderground135.mp3...