Photon OS 3.0: Linux PHSA-2020-3.0-0089

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0089. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136579;...

Fedora 31 : crawl (2020-de88782eaa)

Release 0.24.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

Fedora 31 : mingw-gnutls (2020-d14280a6e8)

https://lists.gnupg.org/pipermail/gnutls-help/2020-March/004642.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Photon OS 2.0: Mysql PHSA-2020-2.0-0239

An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0239. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136408...

Photon OS 2.0: Systemd PHSA-2020-2.0-0236

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0236. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora: Security Advisory for cups (FEDORA-2020-67c84f3f49)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES15 Security Update : salt (SUSE-SU-2020:1151-1)

This update for salt fixes the following issues : Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora: Security Advisory for cups (FEDORA-2020-ebd2ffb92c)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

School ERP Pro 1.0 - 'es_messagesid' SQL Injection

Exploit Title: School ERP Pro 1.0 - 'esmessagesid' SQL Injection Date: 2020-04-28 Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT SQL Injection Detail...

Fedora 31 : qt5-qtbase (2020-3069e44be5)

Security fix for CVE-2015-9541 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 31 : liblas (2020-b0695fcdf7)

This update fixes the following security vulnerabilities: CVE-2018-20536, CVE-2018-20537, CVE-2018-20539, CVE-2018-20540 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 30 : ansible (2020-1b6ce91e37)

Update to upstream bugfix and security update 2.9.7. See https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELO G-v2.9.rst for a detailed list of changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system websit...

hbctableau.merkleinc.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149809 Security Researcher OakdaleHutch Helped patch 26 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting hbctableau.merkleinc.com website and its users...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:1065-1)

This update for ovmf fixes the following issues : CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc bsc1163927. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

Cisco AnyConnect Secure Mobility Client 4.8.01090 Privilege Escalation Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows version 4.8.01090 suffer from a privilege escalation vulnerability due to insecure handling of path names. ------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges due to insecure handling...

AMD Radeon DirectX 11 Driver 8.17.10.0871 Memory Corruption Vulnerability

AMD Radeon DirectX 11 Driver version 8.17.10.0871 suffers from a memory corruption vulnerability. / Title : Advanced Micro Devices, Inc. Radeon DirectX 11 Driver Firefox/MS Edge Memory Corruption Exploit Author : Marcin Ressel Vendor Homepage : https://www.amd.com/ Software Link: n/a Version:...

NETGEAR DST6501 and WNR2000 Information Disclosure Vulnerability

NETGEAR WNR2000 and NETGEAR DST6501 are both products of NETGEAR, Inc. NETGEAR WNR2000 is a wireless router and NETGEAR DST6501 is a wireless extender adapter.NETGEAR DST6501 versions prior to 1.1.0.6 and A security vulnerability exists in versions prior to WNR2000v2 1.2.0.8. An attacker could...

Stripo Inc: [www.stripo.email] There is no rate limit for /it/contact-us/ endpoints

The speed limit for the https://stripo.email/it/contact-us endpoint has not been implemented...

Stripo Inc: [www.stripo.email] There is no rate limit for contact-us endpoints

Summary The speed limit for the https://stripo.email/es/contact-us endpoint has not been implemented. Steps To Reproduce 1. Go to the https://stripo.email/es/contact-us 2. Turn on blocking and fill out the contact form 3. Send request to Intruder. 4. Set your payloads and start attack. 5. There i...

NETGEAR D3600 and D6000 Input Validation Error Vulnerability

The NETGEAR D3600 and NETGEAR D6000 are both a wireless modem from NETGEAR. A security vulnerability exists in the NETGEAR D3600 prior to version 1.0.0.76 and the D6000 prior to version 1.0.0.76, which stems from a misconfiguration of security settings. No details of the vulnerability are availab...