Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: May 13, 2014

Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: May 13, 2014 View products that this article applies to. Introduction This update is for the Microsoft .NET Framework to disable RC4 in Transpor...

MS14-024: Description of the security update for Office 2010 Service Pack 1 (SP1) and Service Pack 2 (SP2): May 13, 2014

MS14-024: Description of the security update for Office 2010 Service Pack 1 SP1 and Service Pack 2 SP2: May 13, 2014 INTRODUCTION Microsoft has released security bulletin MS14-024. To learn more about this security bulletin: Home users:https://www.microsoft.com/security/pc-security/updates.aspxSk...

MS14-024: Description of the security update for Office 2013: May 13, 2014

MS14-024: Description of the security update for Office 2013: May 13, 2014 INTRODUCTION Microsoft has released security bulletin MS14-024. To learn more about this security bulletin: Home users:https://www.microsoft.com/security/pc-security/updates.aspxSkip the details: Download the updates for...

PXE client computers freeze during multithread network transfers in Windows Server 2012 R2

PXE client computers freeze during multithread network transfers in Windows Server 2012 R2 Symptoms When you deploy Windows Server 2012 R2 through Windows Deployment Services WDS Pre-Boot Execution Environment PXE, the server CPU usage spikes to 100%. In this situation, client computers may freez...

vivacite.fr XSS vulnerability

Vulnerable URL: http://www.vivacite.fr/horairesligne/index.asp?rubcode=6=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 09.05.2017 Latest check for patch:| 09.05.2017 15:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

OpenSSL Advisory - May 2016

OpenSSL released an update in May 2016 to address two high and four low severity vulnerabilities...

tcpdump 4.5.1 denial of service vulnerability

No description provided by source. Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LTS from...

WSO2 Carbon 4.4.5 - Local File Inclusion

WSO2 Carbon 4.4.5 - Local File Inclusion + Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-LOCAL-FILE-INCLUSION.txt + ISR: ApparitionSec Vendor: =============== www.wso2.com Product: ====================...

epson.de XSS vulnerability

Vulnerable URL: http://www.epson.de/search/products?search=" Details: Description| Value ---|--- Patched:| Yes, at 10.05.2017 Latest check for patch:| 10.05.2017 09:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 60814 VIP website status:| No Check epson.de S...

openssl-fips security update

1.0.1t-2.0.1 - update to upstream 1.0.1t - Original 1.0.1 test certificates has expired on May 10, 2016. Updated certificatea were copied from 1.0.2h tree [email protected]...

Threat Outbreak Alert RuleID23256: Email Messages Distributing Malicious Software on June 5, 2016

Medium Alert ID: 46566 First Published: 2016 June 6 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23256 may contain the following files: Name | Size...

solarsystem.nasa.gov XSS vulnerability

Vulnerable URL: http://solarsystem.nasa.gov/rps/feedback.cfm?Subject=Insight+WebsiteEmail==Name=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E&g-recaptcha-response;====Mozilla%2F5.0+%28Windows+NT+6.3%3B+WOW64%3B+rv%3A46.0%29+Gecko%2F20100101+Firefox%2F46.0=insightF46.0=insight...

IBM Cognos 11.0 Content Spoofing

/ Content Spoofing Vulnerability in IBM Cognos Analytics Applications Advisory 5190 Patch Release - 30 May 2016 Public Release - 03 June 2016 CVE-2016-0398 The IBM Security Bulletins associated with this CVE have been published at the following URLs: IBM Cognos Analytics 11.0...

bibblo.se XSS vulnerability

Open Bug Bounty ID: OBB-157218 Description| Value ---|--- Affected Website:| bibblo.se Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Threat Outbreak Alert RuleID23148: Email Messages Distributing Malicious Software on May 29, 2016

Medium Alert ID: 46443 First Published: 2016 May 31 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23148 may contain the following files: Name | Size...

AirOS NanoStation M2 5.6-beta - Multiple Vulnerabilities

Exploit for cgi platform in category web applications AirOS NanoStation M2 v5.6-beta Arbitrary File Download & Remote Command Execution Tested on: XM.v5.6-beta5.24359.141008.1753 - Build: 2435 Linux Awesome 2.6.32.63 1 Wed Oct 8 17:54:30 EEST 2014 mips unknown Date: May 30, 2016 Informer: Pablo...

ess.ci.juneau.ak.us XSS vulnerability

Vulnerable URL: https://ess.ci.juneau.ak.us/sso/SSOServlet?locale=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

ford.cz XSS vulnerability

Open Bug Bounty ID: OBB-156887 Description| Value ---|--- Affected Website:| ford.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID23084: Email Messages Distributing Malicious Software on May 25, 2016

Medium Alert ID: 46379 First Published: 2016 May 26 22:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23084 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID23057: Email Messages Distributing Malicious Software on May 25, 2016

Medium Alert ID: 46372 First Published: 2016 May 26 22:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23057 may contain the following files: Name | Size...