Novell GroupWise Cross-Site Scripting Vulnerability (CNVD-2017-05134)

Novell GroupWise is a collaborative communication system from Novell. The system provides collaborative communication services such as e-mail, scheduling, instant messaging, task management, document management, and contact management.Document Viewer Agent is one of the document viewers. A...

CVE-2016-5754

Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before SP2...

Airbnb Clone Script - Arbitrary File Upload

Airbnb Clone Script - Arbitrary File Upload Vulnerability:Profile Arbitrary Shell Upload Google Dork: Airbnb Clone Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/airbnb-clone/ Script Name: Airbnb Clone Script Script Buy Now:...

Penny Auction Script - Arbitrary File Upload

Vulnerability:Profile Arbitrary Shell Upload Google Dork: Penny Auction Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-eauction/ Script Name: Penny Auction Script Script Buy Now: http://www.hotscripts.com/listing/penny-auction-software-156843/ Author: İhsan Şencan Author...

Debian DLA-772-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2012-6704, CVE-2016-9793 Eric Dumazet found that a local user with CAPNETADMIN capability could set a socket's buffer size to be negative, leading ...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20161103)

Security Fixes : - A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd freeze its execution, preventing further management of system services, system shutdown, or zombie process collection via systemd. CVE-2016-7795 Bug Fix...

Arbitrary Command Execution Vulnerability in Crowe Security Certification Gateway

Crowe Security Authentication Gateway is a user authentication, access and access control device, which can guarantee the information security of network and application resources. There is an arbitrary command execution vulnerability in the hot.php page of Crowe Security Gateway. An attacker can...

Oracle Linux 7 : systemd (ELSA-2016-2610)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2610 advisory. 219-30.0.1.3 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - ad...

RHEL 7 : systemd (RHSA-2016:2694)

An update for systemd is now available for Red Hat Enterprise Linux 7.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

On QQ browser and other applications“WormBrowser”vulnerability briefings-vulnerability warning-the black bar safety net

Recently, the national information security vulnerabilities library CNNVD received Pangu team on“WormBrowser”vulnerability of the relevant circumstances of the message sent, the vulnerability exists in the Android version of the QQ browser and QQ hot two applications. Due to the above products, a...

QQ browser Wormable Browser vulnerability

Source link: http://blog.pangu.io/wormable-browser/ Vulnerability description Android QQ browser, QQ hot spots and other applications on the local wifi started, it will monitor local 8786 port, and listens to all local ip addresses. When the attacking party and the attacked party is on the same L...

NUUO NVRmini 2 3.0.8 - Remote Root Exploit

Exploit for php platform in category web applications !/usr/bin/env python NUUO Remote Root Exploit Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS functionality. Setup is simple and easy,...

NUUO NVRmini 2 3.0.8 - Local File Disclosure

NUUO NVRmini 2 3.0.8 - Local File Disclosure NUUO Local File Disclosure Vulnerability Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 NE-4160, NT-4040 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS functionality. Setup is simple and...

Android Qualcomm Component Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A denial-of-service vulnerability exists in the hot driver in the Qualcomm component of Android,...

Memory Leak Vulnerability in Multiple Huawei Products

Huawei IPS Module and others are intrusion prevention and intrusion detection products from Huawei, China. A memory leak vulnerability exists in several Huawei products. A remote attacker can exploit this vulnerability by sending malicious packets to cause a denial of service memory consumption a...

CVE-2016-5435

The CVE-2016-5435 issue affects Huawei security appliances (e.g., IPS Module, NGFW Module, NIP6300/6600, Secospace USG6300/6500/6600/9500 and AntiDDoS8000) in hot standby setups where two devices are not directly connected. The root cause is a memory leak triggered by crafted packets, leading to ...

Modern Reverse Proxy: Traefik

Modern Reverse Proxy Træfɪk is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It supports several backends Docker , Swarm , Mesos/Marathon , Kubernetes , Consul , Etcd , Zookeeper , BoltDB , Rest API, file… to manage its configuration automatically and...

WhatsApp Adds End-to-End Encryption To One Billion Users

The world’s largest online communications company WhatsApp, with one billion users, announced Tuesday it added end-to-end encryption to its entire platform. The move is seen as a major win for security and privacy advocates. It also shifts the encryption spotlight away from Apple and its battle...

Rollout or Not: the Benefits and Risks of iOS Remote Hot Patching

Previously On iOS Remote Hot Patching Apple’s detailed app review process has resulted in greater security for iOS apps made available through the App Store. However, this review process can be lengthy, which negatively impacts developers who need to quickly patch a buggy or insecure app. As a...

Road Smash 2: Hot Pursuit - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Road Smash 2: Hot Pursuit published at the 'play' market has multiple vulnerabilities...