Default application configuration files are available for download

h3. Summary of The Bug By browsing to the following URL path user would be able to download any files under /atlassian-jira/WEB-INF/... code/s/1519/3/1.0//WEB-INF/...code The above URL will be accessible by any users including anonymous even to an instance that does not allow anonymous access h5...

MSSQL Password Hashdump

This module extracts the usernames and encrypted password hashes from a MSSQL server and stores them for later cracking. This module also saves information about the server version and table names, which can be used to seed the wordlist. This module requires Metasploit:...

CVE-2012-3989

CVE-2012-3989 affects Mozilla Firefox (and related Mozilla products) prior to version 16.0, Thunderbird prior to 16.0, and SeaMonkey prior to 2.13. The vulnerability is a crash caused by an invalid cast when using the instanceof operator on certain JavaScript objects, which could allow remote att...

soapbox protection bypass

It's possible to bypass protection by launching second application instance...

Fedora 16 : cloud-init-0.6.3-0.5.bzr532.fc16 (2012-14189)

This update changes the URL that cloud-init uses as a fallback for instance metadata when http://169.254.169.254/ is not reachable from http://instance-data:8773/ to http://instance-data.:8773/ . It also fixes two systemd-related bugs. Note that the former will require DNS server reconfiguration ...

Fedora 18 : cloud-init-0.6.3-0.5.bzr532.fc18 (2012-13972)

This update changes the URL that cloud-init uses as a fallback for instance metadata when http://169.254.169.254/ is not reachable from http://instance-data:8773/ to http://instance-data.:8773/ . It also fixes two systemd-related bugs. Note that the former will require DNS server reconfiguration ...

RHEL 6 : icedtea-web (RHSA-2012:1132)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1132 advisory. - icedtea-web: getvalueforurl uninitialized instance pointer CVE-2012-3422 - icedtea-web: incorrect handling of not 0-terminated strings...

Scientific Linux Security Update : up2date on SL3.x i386/x86_64

previously, up2date did not check if it was running on a KVM-based virtualized instance of Scientific Linux 3.0.9. With this update, up2date now checks for and supports running in fully-virtualized environments. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...

SAP NetWeaver Dispatcher DiagTraceR3Info Packet Parsing Vulnerability

Added: 06/04/2012 CVE: CVE-2012-2611 OSVDB: 81759 Background SAP Netweaver is a technology platform for building and integrating SAP business applications. Problem SAP Netweaver is vulnerable to a stack buffer overflow when configured with the developer trace level set to 2 or higher. The...

Opera Browser Multiple Vulnerabilities-01 (Jul 2011) - Mac OS X

Opera browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Browser Multiple Vulnerabilities-01 July-11 (Mac OS X)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvuln1macosxjuly11.nasl 6018 2017-04-24 09:02:24Z teissa $ Opera Browser Multiple Vulnerabilities-01 July-11 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012 Greenbo...

Opera Browser Multiple Vulnerabilities-01 July-11 (Linux)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnlin01jul11.nasl 5988 2017-04-20 09:02:29Z teissa $ Opera Browser Multiple Vulnerabilities-01 July-11 Linux Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

Fedora Update for cyrus-imapd FEDORA-2011-13832

Check for the Version of cyrus-imapd OpenVAS Vulnerability Test Fedora Update for cyrus-imapd FEDORA-2011-13832 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Adobe ColdFusion Hash Collision DoS (APSB12-06) (credentialed check)

The remote Windows host is running a version of ColdFusion that is affected by a hash collision denial of service. A flaw exists in the way ColdFusion generates hash tables for user-supplied values. By sending a small number of specially crafted requests to a web server that uses ColdFusion, an...

Direct access to issue via url discloses structure without authentication

If an issue is accessed via the direct url an error message discloses if the issue is existent or not - even when the use isn't logged-in. In contrast, an existing issue redirects to the login form. This knowledge may open an attack vector on private Jira instances that require authentication...

RSS feed over entire site gives information on restricted pages the user should not see

A customer has reported this issue via a comment on the documentation: http://confluence.atlassian.com/display/DOC/Working+with+RSS+Feeds?focusedCommentId=276627497comment-276627497 quote When someone has an RSS feed covering the whole Confluence instance, he is informed about changes in restrict...

MSSQL Schema Dump

This module attempts to extract the schema from a MSSQL Server Instance. It will disregard builtin and example DBs such as master, model, msdb, and tempdb. The module will create a note for each DB found, and store a YAML formatted output as loot for easy reading. This module requires Metasploit:...

Unable to process the workload: your license has been exceeded

Challenge A Veeam Backup & Replication job fails with either of the following errors: Error: Not enough licenses. Error: Unable to process the workload: your license has been exceeded Cause The limits of the installed license have been exceeded. Solution Information regarding Veeam Backup &...

Acunetix Web Vulnerability Scanner 8 BETA Released

Acunetix Web Vulnerability Scanner 8 BETA Released The next stage in the evolution of Acunetix Web Vulnerability Scanner has arrived — WVS 8 BETA! Many of you have been biting their nails in anticipation of this Beta, so sit tight and read on for the next most important stage in the evolution of...

Acunetix Web Vulnerability Scanner 8 BETA Released

Acunetix Web Vulnerability Scanner 8 BETA Released The next stage in the evolution of Acunetix Web Vulnerability Scanner has arrived — WVS 8 BETA! Many of you have been biting their nails in anticipation of this Beta, so sit tight and read on for the next most important stage in the evolution of...