SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8503 / 8504)

Wireshark has been updated to version 1.8.11 to fix bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...

SuSE 11.2 / 11.3 Security Update : lcms (SAT Patch Numbers 8424 / 8425)

The lcms userland utilities were updated to fix stack overflows. - Multiple stack-based buffer overflows in LittleCMS allowed remote attackers to cause a denial of service crash via a crafted 1 ICC color profile to the icctrans utility or 2 TIFF image to the tiffdiff utility. CVE-2013-4276...

Paypal Inc BB #47 ALYZ - Persistent Search Vulnerability

Document Title: =============== Paypal Inc BB 47 ALYZ - Persistent Search Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=807 PayPal Security UID: dx1f89rtd Release Date: ============= 2013-11-18 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #42 - Persistent POST Inject Vulnerability

Document Title: =============== PayPal Inc BB 42 - Persistent POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=801 PayPal Security UID: kxy1ea5ech Release Date: ============= 2013-11-17 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #42 - Persistent POST Inject Vulnerability

Document Title: =============== PayPal Inc BB 42 - Persistent POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=801 PayPal Security UID: kxy1ea5ech Release Date: ============= 2013-11-17 Vulnerability Laboratory ID VL-ID:...

Cisco Catalyst 3750-X Series Switch Default Credentials Vulnerability (CSCue92286)

The remote Cisco device potentially contains an issue which, due to default credentials on the Cisco Service Module, could allow a local attacker to gain unauthorized root access. TRUSTED...

Ubuntu 10.04 LTS : libxml-security-java vulnerability (USN-2028-1)

James Forshaw discovered that Apache XML Security for Java incorrectly validated CanonicalizationMethod parameters. An attacker could use this flaw to spoof XML signatures. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory...

NetGear router through command injection to obtain ROOT privileges[EXP]-vulnerability warning-the black bar safety net

! NetGear router through command injection to obtain ROOT privileges\EXP\ - ScriptALeRT - Minghacker /Article/UploadPic/2013-11/201311614443412.jpg Abroad a large cattle study found that the NetGear router wndr3700v4 firmware authenticate the existence of the vulnerability. Once the Web interface...

Plogue Sforzando 1.665 - Buffer Overflow (SEH) (PoC)

Plogue Sforzando 1.665 - Buffer Overflow SEH PoC !/usr/bin/perl Exploit Title: Plogue Sforzando v1.665 Buffer Overflow POC Date Discovered: 10-29-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Sforzando v1.665 Software Link:...

Paypal Inc BB #104 - Persistent Exception Vulnerability

Document Title: =============== Paypal Inc BB 104 - Persistent Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1038 PayPal Security UID: gJ1127yy Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID:...

JVN#52509236: HDL-A and HDL2-A Series vulnerable in session management

HDL-A and HDL2-A Series provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. HDL-A and HDL2-A Series contain a vulnerability related to the management of sessions. Impact A remote unauthenticated attacker may impersonate a user. As a result, information may be disclosed or...

Paypal Shipping Cross Site Scripting

Document Title: =============== Paypal Inc Bug Bounty 105 MOS - Multiple Persistent Print Layout Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1039 PayPal Security UID: xE1128lV Release Date: ============= 2013-10-15 Vulnerability...

Apple iOS 7.0.2 - Sim Lock Screen Display Bypass

Apple iOS 7.0.2 - Sim Lock Screen Display Bypass Document Title: =============== Apple iOS 7.2 - Sim Lock Screen Display Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1105 Video:...

Microsoft paid over $28,000 Rewards to Six Researchers for its first ever Bug Bounty Program

Microsoft today announced that they had paid more than $28,000 in rewards to Security Researchers for its first Bug Bounty program, that went on for a month during the preview release of Internet Explorer 11 IE11. The program was designed to run during Internet Explorer 11's browser beta test on...

Authentication flaw

The PPP Access Concentrator PPPAC in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows...

CVE-2013-4708

The CVE-2013-4708 issue affects SEIL Series routers from Internet Initiative Japan Inc. The vuln arises from predictable random-number generation in the PPP Access Concentrator (PPPAC) when performing RADIUS authentication, allowing remote attackers who can sniff RADIUS traffic to bypass authenti...

Juniper NetScreen VPN Client Detection

The remote host has the Juniper NetScreen VPN Client installed. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid70120; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0914";...

IBM WebSphere Service Registry and Repository Installed

IBM WebSphere Service Registry and Repository, a software life cycle management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70069; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

Vulnerabilities in Avaya IP Office Customer Call Reporter

Hello 3APA3A! I want to warn you about vulnerabilities in Avaya IP Office Customer Call Reporter. These are Remote HTML Include and Remote XSS Include Cross-Site Scripting vulnerabilities. After I found multiple vulnerabilities in Avaya IP Office Customer Call Reporter in December, I informed ZDI...

SuSE 11.3 Security Update : apache2-mod_security2 (SAT Patch Number 8149)

This update of modsecurity2 fixed a NULL pointer dereference crash CVE-2013-2765 and a memory issue double free. bnc822664 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...