Ubuntu Update for libyaml-libyaml-perl USN-2161-1

Check for the Version of libyaml-libyaml-perl OpenVAS Vulnerability Test $Id: gbubuntuUSN21611.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for libyaml-libyaml-perl USN-2161-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Fedora 19 : perl-YAML-LibYAML-0.41-4.fc19 (2014-4517)

This update addressed two security issues. CVE-2013-6393: The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted tags in a YAML...

Ubuntu 12.04 LTS / 12.10 / 13.10 : libyaml-libyaml-perl vulnerabilities (USN-2161-1)

Florian Weimer discovered that libyaml-libyaml-perl incorrectly handled certain large YAML documents. An attacker could use this issue to cause libyaml-libyaml-perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2013-6393 Ivan Fratric discovered that...

MiniDuke Malware spreads via Fake Ukraine-related Documents

A year back, Security Researchers from the Antivirus firm Kaspersky found a sophisticated piece of malware which they dubbed as ‘MiniDuke’, designed specifically to collect and steal strategic insights and highly protected political information, which is a subject to states’ security. Now, once...

Threat Outbreak Alert: Fake Bank Documents Email Messages on April 1, 2014

Medium Alert ID: 33610 First Published: 2014 April 1 20:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank documents for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Faxed Documents Email Messages on April 2, 2014

Medium Alert ID: 33602 First Published: 2014 April 1 15:40 GMT Last Updated: 2014 April 3 12:20 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain faxed documents for the recipient. The text in the email message attempts to...

CVE-2014-2118

Cisco Prime Security Manager (PRSM) prior to and including version 9.2(.1-2) contains multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML pages. The root cause is insufficient input validation in several dashboard HTML parameters, allowing remote attackers to inject arbi...

CVE-2014-2118

Multiple cross-site scripting XSS vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager aka PRSM 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687...

Threat Outbreak Alert: Fake Tax Return Documents Email Messages on March 26, 2014

Medium Alert ID: 33522 First Published: 2014 March 26 20:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain tax return documents for the recipient. The text in the email message attempts to convince the recipient to open...

Fedora Update for jansson FEDORA-2014-3782

Check for the Version of jansson OpenVAS Vulnerability Test Fedora Update for jansson FEDORA-2014-3782 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

OpenXchange crossite scripting

Crossite scripting on MS Office and EML documents viewing...

Threat Outbreak Alert: RuleID9280 Fake Financial Documents Email Messages on October 9, 2015

Medium Alert ID: 33438 First Published: 2014 March 20 19:46 GMT Last Updated: 2015 October 12 11:39 GMT Version: 59 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an invoice for the recipient. The text in the email...

Content Security Policy for data: documents not preserved by session restore — Mozilla

Security researcher Nicolas Golubovic reported that the Content Security Policy CSP of data: documents was not saved as part of session restore. If an attacker convinced a victim to open a document from a data: URL injected onto a page, this can lead to a Cross-Site Scripting XSS attack. The targ...

Syrian Electronic Army hacks U.S Central Command & threatens to leak Secret Documents

The Pro-hacker group, very well known as Syrian Electronic Army SEA aligned with president Bashar al-Assad, had recently taken down Forbes Website, sending a reminder to the international community that cyber warfare is alive and well, and this time the group has targeted U.S Central Command...

GNUpanel 0.3.5_R4 Cross Site Request Forgery / Cross Site Scripting

Exploit Title :GNUpanel 0.3.5R4 - Multiple Vulnerabilities Vendor Homepage :http://wp.geeklab.com.ar/gl-en/gnupanel/ GNUPanel Version :0.3.5R4 Server :Centos 6.4 Exploit Author :Necmettin COSKUN =@babayarisi Blog :http://www.ncoskun.com http://www.grisapka.org Discovery date :03/11/2014 CVE :N/A...

Threat Outbreak Alert: Fake Shipping Documents Email Messages on March 3, 2014

Medium Alert ID: 33160 First Published: 2014 March 3 15:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipping documents for the recipient. The text in the email message attempts to convince the recipient to open th...

Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing (MS10-004) - Ver2 (CVE-2010-0031)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Multiple remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to an invalid array indexing and to a use after free error in Microsoft PowerPoint...

Government Surveillance Could Targeted Automated Updates

SAN FRANCISCO – As more Web-based services are encrypted, privacy advocates are concerned the next wave of aggressive surveillance activity could target automated update services that essentially provide Internet companies root access to machines. Chris Soghoian, principal technologist with the...

The NSA is 'Not Made of Magic'

SAN FRANCISCO–Of the small pool of people who have seen the Snowden documents, few, if any, are as technically savvy and knowledgeable about security and surveillance as Bruce Schneier. And after reading through stacks and stacks of them, Schneier says that yes, the NSA is extremely capable and...

SOL15013 - OpenSSH vulnerability CVE-2011-0539

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy...