VLC Media Player Multiple Vulnerabilities - July 13 (Windows)

This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnjul13win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Multiple Vulnerabilities - July 13 Windows Authors: Arun Kallavi Copyright: Copyright ...

Debian: Security Advisory (DSA-2723-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 3 / 4 : libgsf (ELSA-2007-0011)

From Red Hat Security Advisory 2007:0011 : Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing...

Oracle Linux 6 : openoffice.org (ELSA-2012-0705)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0705 advisory. - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by processing invalid Escher graphics records length in the Powerpoint documents...

IRS Exposes Social Security Numbers Online

The Social Security Numbers of tens of thousands of Americans ended up in a searchable public database that provides access to the tax filing applications of Section 527 political organizations on the Internal Revenue Service’s website. According to OpenSecrets.org, 527s are “…tax-exempt groups...

PT-2013-1167

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.0 libxml2 versions 2.7.6 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a document that ends abruptly, related to the lack of certain checks for the XML PARSER EO...

AOL Instant Messenger 8.0.1.5 Binary Planting

!/bin/bash AOL Instant Messenger 8.0.1.5 Jul 2013 Exploit Windows XP/7 tested and working. Leverages binary file planting to My Documents via AIMs advertisement code. Little social engineering built in using javascript to try to get them to run the AIMInstall.exe. Starts a reverse shell back to...

Stellar Wind Surveillance program under Obama administration

According to secret documents obtained by the Guardian, Obama administration permitted the National Security Agency to surveillance the Emails and Internet metadata of all Americans. This secret warrant less surveillance program, collectively known by the NSA code name Stellar Wind, was launched ...

Telnet-Ftp Service Server 1.0 Directory Traversal

Exploit Title: Telnet-Ftp Service Server v1.0 Directory Traversal Vulnerability Date Published: 2013/6/18 Exploit Author: Chako Software Link: http://telnet-ftp-server.en.softonic.com/ Version: v1.0 Build 1.218 Tested on: Windows Xp SP3 English Description: ===================== A vulnerability h...

Handling of Encryption, Tor Exposed in Leaked NSA Documents

New top-secret NSA documents released by the Guardian UK newspaper reveal that the United States’ top spy agency can retain encrypted communications for as long as it takes analysts to decrypt the secret messages—even if they’re collected by chance and without a warrant. In addition, the document...

Threat Outbreak Alert: Fake Documents Attachment Email Messages on June 14, 2013

Medium Alert ID: 29676 First Published: 2013 June 17 12:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an important document for the recipient. The text in the email message attempts to convince the recipient to open...

Whistleblower Edward Snowden claims, NSA has been hacking China since 2009

Edward Snowden, the self confessed NSA Whistleblower of secret surveillance documents, claimed Wednesday that the United States intelligence agents have been hacking computer networks around the world, specially Chinese targets since 2009. Snowden alleged that the Prism program, which collects...

Threat Outbreak Alert: Fake Documents Attachment Email Messages on June 10, 2013

Medium Alert ID: 29622 First Published: 2013 June 10 18:50 GMT Last Updated: 2013 June 11 14:28 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain important documents from Wells Fargo for the recipient. The text in the emai...

Surveillance malware targets 350 high profile victims in 40 countries

A global cyber espionage campaign affecting over 350 high profile victims in 40 countries, appears to be the work of Chinese hackers using a Surveillance malware called "NetTraveler". Kaspersky Lab's team of experts published a new research report about NetTraveler, which is a family of malicious...

Surveillance malware targets 350 high profile victims in 40 countries

A global cyber espionage campaign affecting over 350 high profile victims in 40 countries, appears to be the work of Chinese hackers using a Surveillance malware called "NetTraveler". Kaspersky Lab’s team of experts published a new research report about NetTraveler, which is a family of malicious...

PHP 5.4.x < 5.4.13 Information Disclosure

According to its banner, the version of PHP 5.4.x installed on the remote host is prior to 5.4.13. It is, therefore, potentially affected by an information disclosure vulnerability. The 5.4.12 fix for CVE-2013-1635 / CVE-2013-1643 was incomplete and an error still exists in the files...

CVE-2013-1336

The Common Language Runtime CLR in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature...

[REMnux] A Linux Distribution for Malware Analysis

REMnux incorporates a number of tools for analyzing malicious executables that run on Microsoft Windows, as well as browser-based malware, such as Flash programs and obfuscated JavaScript. This popular toolkit includes programs for analyzing malicious documents, such PDF files, and utilities for...

Microsoft SharePoint weak permissions

Weak documents access rights...

Ubuntu Update for poppler USN-1785-1

Check for the Version of poppler OpenVAS Vulnerability Test $Id: gbubuntuUSN17851.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for poppler USN-1785-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...