7228 matches found
Buffer Overflows Patched in Yokogawa Control System Products
Patches for critical vulnerabilities in production control system software built by Yokogawa Electric Corp. of Japan are available, according to an advisory issued Tuesday by the Industrial Control System Cyber Emergency Response Team ICS-CERT. The advisory warns that there are publicly available...
MS KB2957151: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer
The remote host is missing KB2957151. It is, therefore, affected by multiple vulnerabilities : - An unspecified use-after-free vulnerability exists that could allow for the execution of arbitrary code. CVE-2014-0510 - An unspecified vulnerability exists that could be used to bypass the same origi...
MS14-026: Vulnerability in .NET Framework Could Allow Elevation of Privilege (2958732)
The remote Windows host has a version of the Microsoft .NET Framework that is affected by a privilege escalation vulnerability due to the way that .NET Framework handles TypeFilterLevel checks for some malformed objects. Note that this vulnerability only affects applications that use .NET Remotin...
DEBIAN-CVE-2013-6453
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML...
McAfee Web Gateway OpenSSL Information Disclosure (SB10071) (Heartbleed)
The remote host is running a version of McAfee Web Gateway MWG that is affected by an information disclosure vulnerability due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory...
McAfee ePolicy Orchestrator OpenSSL Information Disclosure (SB10071) (Heartbleed)
The remote host is running a version of McAfee ePolicy Orchestrator that is affected by an information disclosure due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory from the...
KLA10366 OSI vulnerability in Titan FTP Server
A directory traversal vulnerability was found in Titan FTP Server. By exploiting this vulnerability malicious users can list usernames or home folder. This vulnerability can be exploited remotely via specially designed parameters. Original advisories Changelog Exploitation Public exploits exist f...
Siemens Update on Heartbleed Patches in ICS, SCADA
Industrial control equipment manufacturer Siemens has produced a security update that mitigates the OpenSSL Heartbleed vulnerability in its eLAN systems and now its WinCC OA supervisory control and data acquisition SCADA software as well. The company is continuing to work on patches to resolve th...
CVE-2014-0984
creationtimestamp| type| source ---|---|--- 2014-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32919...
Certificate Revocation Slow on Heartbleed Web Servers
The rush to revoke and replace digital certificates on Heartbleed-vulnerable Web servers seems to be no rush at all. Internet research and security services firm Netcraft reports today that of the more than 500,000 servers it knows of that are running vulnerable versions of OpenSSL, only 80,000...
PhpMyAdmin exploits concludes With Metasploit-vulnerability warning-the black bar safety net
A: affects versions: 3.5. x 3.5.8.1 and 4.0.0 4.0.0-rc3 Overview: PhpMyAdmin presence of a PREGREPLACEEVAL vulnerability Use module: exploit/multi/http/phpmyadminpregreplace CVE: CVE-2 0 1 3-3 2 3 8 II: effects version: phpMyAdmin v3. 5. 2. 2 Overview: PhpMyAdmin存在serversync.php Backdoor...
Obama Lets NSA Use Zero-Day Exploits by labeling it as 'National Security Need'
On Saturday, the Senior Administration Officials cast light on the subject of Internet Security and said President Obama has clearly decided that whenever the U.S. Intelligence agency like NSA discovers major vulnerabilities, in most of the situations the agency should reveal them rather than...
Oracle Linux 6 : samba4 (ELSA-2014-0383)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0383 advisory. - resolves: 1073913 - Fix CVE-2012-6150. - resolves: 1073913 - Fix CVE-2013-4496. Tenable has extracted the preceding description block directly from t...
Fedora 20 : openssl-1.0.1e-37.fc20.1 (2014-4879)
pull in upstream patch for CVE-2014-0160 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory 2014-4879. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73429;...
Canon PIXMA Printer Administration Authentication Bypass
The remote printer contains a flaw that could allow a remote attacker to obtain sensitive information. The HTTP admin interface does not require credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73375;...
Pompem - Exploit Finder
Pompem is an open source tool, which is designed to automate the search for exploits in major databases. Developed in Python, has a system of advanced search, thus facilitating the work of pentesters and ethical hackers. In its current version, performs searches in databases: Exploit-db, 1337day,...
Malware Attacks Against Linux 2.6 Websites
The risks presented by unsupported operating systems are being called out in a large-scale attack on hundreds of websites. Hackers have hit web servers running a version of the Linux 2.6 kernel released seven years ago. The result is a multistage attack where compromised websites are spiked with...
Firefox 28 Patches Four Pwn2Own Zero-Day Vulnerabilities
The Firefox web browser took a beating during last week’s Pwn2Own contest with researchers bringing four zero-day vulnerabilities and exploits to the table, walking away with a collective $200,000 in prize money in the process. Yesterday, Mozilla capped all four bugs among 18 security advisories...
World’s First Google Glass Spyware app unveiled
In the mob of Smart Devices, after Smartphones... Google glass would definitely be the next must-have device. It’s non-other than a small computer you wear like eyeglasses allows you to surf the Web, email, text, take photos, live videos and more, -- all hands free. Google Glasses are yet in very...