CloudPets Notifies California AG of Data Breach

Spiral Toys, the parent company behind CloudPets, yesterday sent the California Attorney General a breach notification that on many fronts contradicts what experts have said about a database breach that exposed user data and private voice messages, many of which were made by children. The...

Files.com: CSRF @ configuration

Enter the support PIN from your test site if applicable: Enter the name of your test site if applicable: gaming2 Enter the subdomain from your test site if applicable: gaming2 Fill in the rest of your report below: ---- Greeting guys , i found a CSRF Bug at the configuration - General form in all...

Debian Security Advisory DSA 3792-1 (libreoffice - security update)

Ben Hayak discovered that objects embedded in Writer and Calc documents may result in information disclosure. Please see https://www.libreoffice.org/about-us/security/advisories/cve-2017-3157/ for additional information. OpenVAS Vulnerability Test $Id: deb3792.nasl 8091 2017-12-13 06:22:57Z teiss...

Kernel security update: Virtuozzo ReadyKernel patch 11.0 for kernel 3.10.0-327.36.1.vz7.20.18 (Virtuozzo 7.0.3)

The cumulative Virtuozzo ReadyKernel patch updated with security fixes as well as a usability bug fix. The patch applies to Virtuozzo 7.0.3. Vulnerability id: CVE-2016-9806 A double free vulnerability was found in netlinkdump, which could cause a denial of service or possibly other unspecified...

Fedora Update for java-1.8.0-openjdk-aarch32 FEDORA-2017-4cb58f0bda

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2016-9360

An issue was discovered in General Electric GE Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has acces...

CVE-2016-9360

An issue was discovered in General Electric GE Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has acces...

CVE-2016-9360

An issue was discovered in General Electric GE Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has acces...

CVE-2016-9360

The CVE-2016-9360 issue affects GE Proficy HMI/SCADA iFIX (Version 5.8 SIM 13 and earlier), CIMPLICITY (Version 9.0 and earlier), and Historian (Version 6.0 and earlier). Root cause: Insufficiently protected credentials enabling password retrieval when an attacker has access to an authenticated s...

CVE-2016-6115

IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash...

Buffer overflow

IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash...

CVE-2016-6115

IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash...

CVE-2016-6115

CVE-2016-6115 affects IBM GPFS/Spectrum Scale (e.g., Elastic Storage Server and GPFS Storage Server). The vulnerability is a buffer overflow in IBM General Parallel File System that could be triggered by a remote authenticated attacker, allowing arbitrary code execution with root privileges or ca...

mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)

It was discovered that the MySQL logging functionality allowed writing to MySQL configuration files. An administrative database user, or a database user with FILE privileges, could possibly use this flaw to run arbitrary commands with root privileges on the system running the database server...

MySQL Cluster 7.2.x < 7.2.20 General Subcomponent DoS (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.2.x prior to 7.2.20. It is, therefore, affected by an unspecified flaw in the General subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. C Tenable Network Security, Inc...

MySQL Cluster 7.3.x < 7.3.9 General Subcomponent DoS (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.3.x prior to 7.3.9. It is, therefore, affected by an unspecified flaw in the General subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. C Tenable Network Security, Inc...

MySQL Cluster 7.4.x < 7.4.6 General Subcomponent DoS (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.4.x prior to 7.4.6. It is, therefore, affected by an unspecified flaw in the General subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. C Tenable Network Security, Inc...

Local Information Disclosure Vulnerability in Multiple GE Products

GE Proficy HMI/SCADA-CIMPLICITY is a client/server based HMI/SCADA solution from General Electric GE. The solution is capable of capturing and sharing real-time and historical data across all levels of the enterprise, enabling operational visualization of processes, equipment, and resource...

Court Documents Reveal How Feds Spied On Connected Cars For 15 Years

It's not always necessary to break into your computer or smartphone to spy on you. Today all are day-to-day devices are becoming more connected to networks than ever to add convenience and ease to daily activities. But here's what we forget: These connected devices can be turned against us becaus...

Hindu Matrimonial Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability:: Admin Login Bypass & SQLi + Add/Edit Date: 13.01.2017 Vendor Homepage: http://www.phpmatrimonialscript.in/ Script Name: Hindu Matrimonial Script Script Buy Now: http://www.phpmatrimonialscript.in/product/hindu-matrimonial-scrip...