Fedora 24 : drupal7-views (2016-fff25f75b4)

Fixes Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036 Changes since 7.x-3.13 : - Adding field handlers for statistics fields - \2200309 by helmo: Changed invalid placeholder from 'handler' to 'extender'. - \2708535 by stefan.r: Allow users to sort on a specific language, showing it...

Fedora 23 : drupal7-views (2016-ed5f606dde)

Fixes Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036 Changes since 7.x-3.13 : - Adding field handlers for statistics fields - \2200309 by helmo: Changed invalid placeholder from 'handler' to 'extender'. - \2708535 by stefan.r: Allow users to sort on a specific language, showing it...

Local file exposure

PMASA-2016-35 Announcement-ID: PMASA-2016-35 Date: 2016-07-12 Summary Local file exposure Description A vulnerability was discovered where a user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. Severity We consider this vulnerability to be...

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain access to user account information.

In the D-Link DSR-500 router, all users are given the right to read the system password file...

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain access to user account information.

In the file system of the D–Link DSR–500 router, user passwords are stored publicly in the file /tmp/teamf1.cfg.ascii...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the linux-headers-2.6.26-2-xen-amd64 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The Linux-image-2.6.26-2-r5k-ip32 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may result in a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The Linux-image-2.6.18-6-sparc64-smp package from the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may result in a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities of the linux-headers-2.6.26-2-all-powerpc package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

openstack-ironic: Ironic Node information including credentials exposed to unauthenticated users

An authentication vulnerability was found in openstack-ironic. A client with network access to the ironic-api service could bypass OpenStack Identity authentication, and retrieve all information about any node registered with OpenStack Bare Metal. If an unprivileged attacker knew or was able to...

SUSE-SU-2016:2217-1 Security update for kinit

kinit was updated to fix one security issue. This security issue was fixed: - CVE-2016-3100: World readable Xauthority file exposed cookie credentials boo983926...

Nextcloud: nextcloud.com: Directory listening for 'wp-includes' forders

Hello guys, Details: The web server is configured to display the list of files contained in this directory. As a result of a misconfiguration - end user / attacker able to see content of the folders with systemically important files Vulnerable place: /wp-includes directory when I tried to navigat...

Urban Dictionary: Infinite Upvoting/Downvoting: Lockout Bypass, Plus: Exposed API Documentation

By sending an extra parameter kind=1 in the upvote/downvote API request, a user can vote as many times as he wants without any IP address restriction: http://api.urbandictionary.com/v0/vote?kind=1&direction=up&defid=94413 Seems harmless enough, but your site does depend on the accuracy of the...

Docker exposure to 2 3 7 5 port, causing security vulnerabilities-vulnerability warning-the black bar safety net

Today there is a small partner found the docker exposed 2 3 7 5 port, causing a security vulnerability. I now introduce to you the whole thing the ins and outs, and tell little friends, and how to fix this vulnerability. In order to implement Cluster Management, Docker provides a remote managemen...

samba: SAMR and LSA man in the middle attacks

A protocol flaw, publicly referred to as Badlock, was found in the Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD. Any authenticated DCE/RPC connection that a client initiates against a server could be used by a...

LINE POP - Customized SSL, Dangerous filesystem permissions, Exported components with free access vulnerabilities

HackApp vulnerability scanner discovered that application LINE POP published at the 'play' market has multiple vulnerabilities...

Panzer Sturm - Dangerous filesystem permissions, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Panzer Sturm published at the 'play' market has multiple vulnerabilities...

Only One - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Only One published at the 'play' market has multiple vulnerabilities...

Airplanes Quartet - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Airplanes Quartet published at the 'play' market has multiple vulnerabilities...

Ultimate Notepad - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Ultimate Notepad published at the 'play' market has multiple vulnerabilities...