tomcat security, bug fix, and enhancement update

0:7.0.69-10 - Related: rhbz1368122 0:7.0.69-9 - Resolves: rhbz1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header - Resolves: rhbz1368122 0:7.0.69-7 - Resolves: rhbz1362545 0:7.0.69-6 - Related: rhbz1201409 Added /etc/sysconfig/tomcat to the systemd unit fo...

[SECURITY] [DSA 3687-1] nspr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3687-1 [email protected] https://www.debian.org/security/ Florian Weimer October 05, 2016 https://www.debian.org/security/faq -...

Updated golang package fixes security vulnerability

Updated golang packages fix security vulnerability: Go: sets environmental variable based on user supplied Proxy request header CVE-2016-5386...

Updated python3/python packages fix security vulnerability

Fix for CVE-2016-1000110 HTTPoxy attack. Many software projects and vendors have implemented support for the “Proxy” request header in their respective CGI implementations and languages by creating the “HTTPPROXY” environmental variable based on the header value. When this variable is used in man...

Threat Outbreak Alert RuleID24477: Email Messages Distributing Malicious Software on August 23, 2016

Medium Alert ID: 48565 First Published: 2016 August 23 17:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24477 may contain the following files: Name |...

OpenSSH 7.x < 7.3 Multiple Vulnerabilities

Binary data 9507.prm...

php security update

5.3.3-48 - don't set environmental variable based on user supplied Proxy request header CVE-2016-5385...

The plant controller has a remote vulnerability and no patch-vulnerability warning-the black bar safety net

Power station use of an industrial control system has not patched the vulnerability, an attacker can remotely exploit it to gain network control. Remedy method? Turning off the function or replace the equipment. Power station use of an industrial control system has not patched the vulnerability, ...

Environmental Systems Corporation(ESC)8832数据控制器权限绕过及XSS漏洞

No description provided by source...

CVE-2016-4502

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter...

CVE-2016-4502

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter...

CVE-2016-4501

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

Authentication flaw

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

CVE-2016-4502

The CVE-2016-4502 entry affects Environmental Systems Corporation (ESC) 8832 Data Controller versions 3.02 and earlier. The vulnerability allows remote attackers to bypass authentication and perform unauthorized administrative operations by abusing a modified parameter, enabling privilege escalat...

CVE-2016-4501

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

CVE-2016-1531

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...

Here's Why Microsoft Drops a Cloud Data Center Under the Ocean

Where tech companies like Facebook and Google prefer to move their data centers to colder countries to reduce their air conditioning bill, Microsoft has come up with an even better home for data centers while cutting high energy costs for cooling them: Under the Sea. Here's what Microsoft says:...

XYCMS环保设备企业建站系统 SQL 注入漏洞

No description provided by source...

XYCMS环保设备企业建站系统数据库发现漏洞

No description provided by source...

groundwaterenvironmentalgroup.com XSS vulnerability

Vulnerable URL: http://groundwaterenvironmentalgroup.com/GalleryView.asp?MyName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=Photos/Everglades/frogonpad.jpg Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:03 GMT Vulnerability type:| XSS...