Cisco IOS and IOS XE Software Smart Install Denial of Service Vulnerability

The Smart Install client feature in Cisco IOS and IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect handling of image list parameters. An attacker...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...

Fedora Update for xen FEDORA-2016-38

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Google Chrome browser allows a perpetrator to influence the integrity of information.

The vulnerability of the Google Chrome browser’s web store extension implementation relates to an error in the installation process after the installation window closes. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of information through a specially...

Mageia: Security Advisory (MGASA-2016-0114)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for 389-ds-base FEDORA-2016-40401300

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows - 'NetAPI32.dll' Code Execution (Python) (MS08-067)

import struct import time import sys from threading import Thread Thread is imported incase you would like to modify try: from impacket import smb from impacket import uuid from impacket import dcerpc from impacket.dcerpc.v5 import transport except ImportError, : print 'Install the following...

Attempting to upgrade/install Backup Enterprise Manager to v9 – Error: “No such service found”

While attempting to upgrade/install Veeam Backup Enterprise Manager to v9 the error “No such service found” occurs. For this KB to be applicable the following errors must be found within the CatalogSe...

Oracle Java SE Arbitrary Code Execution Vulnerability (CNVD-2016-01070)

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the Install subcomponent of t...

CVE-2016-0603

Unspecified vulnerability in the Java SE component in Oracle Java SE 6u111, 7u95, 8u71, and 8u72, when running on Windows, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install. NOTE: the previous information is from Oracle's Securit...

Oracle: Security Advisory (ELSA-2015-1053)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MoMoCMS_v3.1 install/index.php重装系统

MoMoCMSv3.1企业建站系统 Install/index.php里没有进行判断lock，你们能判断一下lock吗？ 在install/index.php $document.readyfunction / setup navigation, content boxes, etc... / // validate signup form on keyup and submit var validator = $"loginform".validate rules: dbhost: "required", dbname: "required", dbuser: "required",...

Oracle Supply Chain Agile Engineering Data Management Install Component Data Access Vulnerability

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified vulnerability exists in the Oracle Supply Chain Agile Engineering Data Management Install component, which allows...

CVE-2016-0498

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows local users to affect confidentiality via unknown vectors related to Install...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows local users to affect confidentiality via unknown vectors related to Install...

Shopex V4.8.4-4.8.5 svinfo.php 文件信息泄露漏洞

0x01 框架简述 Shopex是国内市场占有率最高的网店软件，基于免费开源但却性能卓越的Lamp（Linux+Apache+Mysql+Php）架构，最大程度降低您的总体拥有成本。 中文名：商派 外文名：Shopex 服务商：上海派浓网络科技有限公司 官方主页：http://www.shopex.cn/ 0x02 漏洞细节 如果install目录没删，下面这个可以看phpinfo http://www.xx.com/install/svinfo.php?phpinfo=true 两个实例： http://www.5fa.cc/install/svinfo.php?phpinfo=tru...

ownCloud Server Information Disclosure Vulnerability (CNVD-2016-00190)

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud, which provides file management, music storage, calendaring, etc. OwnCloud Server is a server version. A security vulnerability exists in ownCloud Server versions prior to 8.0.9 and 8.1.4 prior to 8.1....

Jobs fail with “Error: Invalid product version” after upgrade to Veeam Backup & Replication v9

Challenge After upgrading to Veeam Backup & Replication v9, all jobs fail with "Error: Invalid product version." Cause During the upgrade process the new v9 license file was not installed. Solution Install the new v9 license file that can be acquired from the support portal. The following link wi...

Fedora Update for bind FEDORA-2015-2

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Graphics Memory Corruption Vulnerability (CNVD-2015-08115)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists in the Windows font library of Microsoft Windows. The vulnerability exists because the program does not properly handle specially designed embedded fonts. A remo...