Low: Red Hat Security Advisory: sssd security, bug fix, and enhancement update

Updated sssd packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which give...

ESA-2011-015: RSA, The Security Division of EMC, announces a fix for a security vulnerability in RSA Data Loss Prevention

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-015: RSA, The Security Division of EMC, announces a fix for a security vulnerability in RSA Data Loss Prevention Advisories Updated April 25, 2011 Summary: RSA, The Security Division of EMC, announces a fix for a security vulnerability in RSA...

ESA-2011-014: RSA, The Security Division of EMC, announces the release of Adaptive Authentication (On-Premise) Flash File Security Patch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-014: RSA, The Security Division of EMC, announces the release of Adaptive Authentication On-Premise Flash File Security Patch Advisories Updated April 14, 2011 Summary: A potential cross-site scripting vulnerability has been identified in RSA...

The Underground Cyber Hacking Challenge !

The Underground Cyber Hacking Challenge ! Menu of the day 0x00 - 0p3nH4x 1 2011 - Ezine 1 0x01 - The structure of 0p3nH4x 1 2011 0x02 - About the targets 0x03 - Goals 0x04 - Points system 0x05 - Reporting and Documentation 0x06 - Prizes, biatchez 0x07 - Rules 0x08 - Registrations and information...

Seraph in Confluence 3.5 environment no longer able to instantiate custom authenticator

Customer using custom authenticator no longer works in Confluence 3.5 despite updates to latest API, latest Atlassian SDK, and building against Confluence 3.5 and embedded Crowd. See attached error log from customer. In brief, error is: noformat Caused by:...

CVE-2010-3275

creationtimestamp| type| source ---|---|--- 2011-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17048 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/vlcamv.rb 2025-02-06 03:13:39+00:00| seen|...

[SECURITY] Fedora 15 Update: mailman-2.1.14-5.fc15

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

[SECURITY] Fedora 14 Update: mailman-2.1.13-7.fc14

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

nping-brute NSE Script

Performs brute force password auditing against an Nping Echo service. See for Echo Mode documentation. Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for the cred...

Fedora 14 : pywebdav-0.9.4.1-1.fc14 (2011-2460)

The server affected by the CVE is distributed only as documentation, not as a directly runnable component. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

Gentoo Security Advisory GLSA 201006-18 (sun-jre-bin sun-jdk emul-linux-x86-java)

The remote host is missing updates announced in advisory GLSA 201006-18. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

[SECURITY] Fedora 14 Update: wireshark-1.4.3-1.fc14

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

Cross site scripting

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...

CVE-2010-4710

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...

Fedora 13 : Django-1.2.4-1.fc13 (2011-0096)

Mon Jan 3 2011 Steve 'Ashcrow' Milner - 1.2.4-1 - Update for multiple security issues see http://www.djangoproject.com/weblog/2010/dec/22/securi ty/ - Sat Oct 9 2010 Steve 'Ashcrow' Milner - 1.2.3-3 - Now build docs for F12+ - Added Django-remove-djangodocs-ext.patch - Sat Oct 9 2010 Steve...

ISC BIND 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability

ISC BIND is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

Fedora 14 : Django-1.2.4-1.fc14 (2011-0120)

Mon Jan 3 2011 Steve 'Ashcrow' Milner - 1.2.4-1 - Update for multiple security issues see http://www.djangoproject.com/weblog/2010/dec/22/securi ty/ - Sat Oct 9 2010 Steve 'Ashcrow' Milner - 1.2.3-3 - Now build docs for F12+ - Added Django-remove-djangodocs-ext.patch - Sat Oct 9 2010 Steve...

Digital Forensics Framework v0.9.0 latest version download !

"DFF Digital Forensics Framework is a simple but powerful tool with a flexible module system which will help you in your digital forensics works, including file recovery due to error or crash, evidence research and analysis, etc. DFF provides a robust architecture and some handy modules." This is...

[SECURITY] Fedora 13 Update: mantis-1.1.8-5.fc13

Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.1.8...

CVE-2010-4179

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid MRG 1.3 recommends that Condor should be configured so that the MRG Management Console cumin can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with...