Subrion 3.X.X - Multiple Vulnerabilities

Exploit for php platform in category web applications - Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X...

Subrion 3.x - Multiple Vulnerabilities

Subrion 3.x - Multiple Vulnerabilities - Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X Tested Version =...

Subrion 3.x - Multiple Vulnerabilities

Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X Tested Version = Latest, 3.3.5 on a Wamp Server. x Google...

Updated roundcubemail package fixes security vulnerabilities

Multiple security issues in the DBMail driver for the password plugin, including buffer overflows CVE-2015-2181 and the ability for a remote attacker to execute arbitrary shell commands as root CVE-2015-2180. An authenticated user can download arbitrary files from the web server that the web serv...

MGASA-2015-0400 Updated roundcubemail package fixes security vulnerabilities

Multiple security issues in the DBMail driver for the password plugin, including buffer overflows CVE-2015-2181 and the ability for a remote attacker to execute arbitrary shell commands as root CVE-2015-2180. An authenticated user can download arbitrary files from the web server that the web serv...

TrueCrypt Local Elevation of Privilege Vulnerability (CNVD-2015-06540)

TrueCrypt is a free and open source encryption software. A security vulnerability exists in the TrueCrypt installation driver for Windows systems. An attacker can exploit the vulnerability to elevate privileges...

ICZ MATCHA SNS Code Injection Vulnerability

ICZ MATCHA SNS is a set of SNS software from ICZ Japan. A security vulnerability exists in the installer of ICZ MATCHA SNS 1.3.6 and earlier versions. A remote attacker can exploit the vulnerability to execute arbitrary PHP code...

ICZ MATCHA INVOICE Code Injection Vulnerability

ICZ MATCHA INVOICE is a Web-based billing management software from ICZ Japan. A security vulnerability exists in the installer of ICZ MATCHA INVOICE 2.5.6 and earlier versions, which can be exploited by remote attackers to execute arbitrary PHP code...

CVE-2015-5644

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2015-5643

The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

Cisco AnyConnect Secure Mobility Client Elevation of Privilege Vulnerability (CNVD-2015-06520)

Cisco AnyConnect Secure Mobility Client is a set of next-generation VPN clients from Cisco. The client enables remote users to securely connect to the Cisco ASA 5500 device via SSL VPN. An elevation of privilege vulnerability exists in Cisco AnyConnect Secure Mobility Client 4.1on OS X Linux that...

CVE-2015-5643

The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2015-5644

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2015-5644

CVE-2015-5644 affects ICZ MATCHA SNS prior to 1.3.7. The installer fails to correctly configure the database, enabling a code injection path that allows a remote attacker to execute arbitrary PHP code. The vulnerability is tied to installer-time database configuration (CWE-94) and culminates in c...

RPC function call failed. Function name: [GetSvcVersion]

Challenge Veeam Backup & Replication fails to communicate with the Veeam Installer Service service on a managed remote machine with the error: Error: The RPC server is unavailable. RPC function call failed. Function name: GetSvcVersion. Target machine: remotemachine.domain.tld:6160. This article ...

Advertising software use the Apple OS X system vulnerabilities to steal data-vulnerability warning-the black bar safety net

! Malwarebytes security researchers found an advertisement software installation program is accessing MAC OS X's password management system Keychain to. In July, researchers have identified the Mac OS X operating system of a local elevation of Privilege（LPF）vulnerabilities. Experts have found tha...

WordPress Multi Plugin Installer Plugin <= 1.1.0 - Local File Traversal

Because of this vulnerability, unauthenticated attackers can read arbitrary files. Solution Update the plugin...

Microsoft Internet Explorer add-on Installer Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape Enhanced Protected Mode on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2015-4674

The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file...

CVE-2015-4674

The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file...