Stable Channel Update

The stable channel has been updated to 42.0.2311.135 for Windows, Mac and Linux. A list of changes is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if...

The Spring Framework tags EL expressions to perform vulnerability analysis CVE-2 0 1 1-2 7 3 0-a vulnerability warning-the black bar safety net

0x00 Preface This vulnerability has been out for a long time, the previous simple analysis, but due to time constraints, no in-depth study of principles, the online on this vulnerability analysis is also not too much recently due to work reasons, in-depth analysis about the vulnerability of the...

IT-Grundschutz M5.009: Protokollierung am Server

IT-Grundschutz M5.009: Protokollierung am Server. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM5009.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 5.009 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks GmbH,...

IT-Grundschutz M4.338: Einsatz von File und Registry Virtualization bei Clients ab Windows Vista

IT-Grundschutz M4.338: Einsatz von File und Registry Virtualization bei Clients ab Windows Vista. Stand: 15. Ergänzungslieferung 15. EL. Hinweis: Nur ein genereller Test, ob Vista File und Registry Virtualization aktiviert ist. OpenVAS Vulnerability Test $Id: GSHBM4338.nasl 8004 2017-12-06...

IT-Grundschutz, 15. EL

Zusammenfassung von Tests gemäß der IT-Grundschutz Kataloge mit Stand 15. Ergänzungslieferung. Diese Routinen prüfen sämtliche Maßnahmen des IT-Grundschutz des Bundesamts für Sicherheit in der Informationstechnik BSI auf den Zielsystemen soweit die Maßnahmen auf automatisierte Weise abgeprüft...

IT-Grundschutz M4.022: Verhinderung des Vertraulichkeitsverlusts schutzbedürftiger Daten im Unix-System

IT-Grundschutz M4.022: Verhinderung des Vertraulichkeitsverlusts schutzbedürftiger Daten im Unix-System. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4022.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.022 Authors: Thomas Rotter Copyright:...

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4288.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.288 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks...

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4227.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.227 Authors: Thomas Rotter Copyright: Copyright c 2015...

IT-Grundschutz M4.052: Geräteschutz unter NT-basierten Windows-Systemen

IT-Grundschutz M4.052: Geräteschutz unter NT-basierten Windows-Systemen. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4052.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.052 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone...

IT-Grundschutz M5.145: Sicherer Einsatz von CUPS

IT-Grundschutz M5.145: Sicherer Einsatz von CUPS. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...

IT-Grundschutz M4.080: Sichere Zugriffsmechanismen bei Fernadministration

IT-Grundschutz M4.080: Sichere Zugriffsmechanismen bei Fernadministration. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions

It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute...

JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions

It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute...

CVE-2014-6914

The Houcine El Jasmi aka com.devkhr31.houcineeljasmi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Houcine El Jasmi aka com.devkhr31.houcineeljasmi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6914

CVE-2014-6914 affects the Android app Houcine El Jasmi (package com.devkhr31.houcineeljasmi) version 1.0, which does not verify X.509 certificates when validating SSL servers. This allows man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSS...

CVE-2014-6914

The Houcine El Jasmi aka com.devkhr31.houcineeljasmi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Cross site scripting

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a 1 tag or 2 EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting XSS attacks via application-specific vectors...

Pligg CMS (story.php?id) 1.0.4 - SQL Injection Vulnerability

No description provided by source. / ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor :...

CH-CMS.ch-V2 Upload Vulnerability

No description provided by source. ======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Author El-Kahina | email please forgive me $ | Web Site http://kewlshare.com/dl/f1b6b4d587ab/95Final2bugfixinstall.rar.html $ |...