Aegir - Moderately Critical - Code Execution Prevention - SA-CONTRIB-2015-113

The Aegir Hosting System enables you to deploy and manage Drupal sites. When writing Apache vhost files for hosted sites on a common platform multi-site, Aegir doesn't block execution of code uploaded to another site on the same platform. This vulnerability is mitigated by the fact that an attack...

Security fix for the ALT Linux 6 package openssl10 version 1.0.0p-alt0.M60P.1

1.0.0p-alt0.M60P.1 built April 23, 2015 Michael Shigorin in task 143478 April 23, 2015 Michael Shigorin - Updated to 1.0.0p fixes CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572, CVE-2015-0204, CVE-2015-0205, CVE-2014-8275, CVE-2014-3570...

Palo Alto Traps Server 3.1.2.1546 - Persistent Cross-Site Scripting

!/usr/bin/ruby =begin ------------------------------------------------------------------------ Product: Palo Alto Traps Server formerly Cyvera Endpoint Protection Vendor: Palo Alto Networks Vulnerable Versions: 3.1.2.1546 Tested Version: 3.1.2.1546 Advisory Publication: 29 March 2015 Vendor...

Palo Alto Traps Server 3.1.2.1546 Cross Site Scripting

------------------------------------------------------------------------ Product: Palo Alto Traps Server formerly Cyvera Endpoint Protection Vendor: Palo Alto Networks Vulnerable Versions: 3.1.2.1546 Tested Version: 3.1.2.1546 Advisory Publication: 29 March 2015 Vendor Notification: 17 October 20...

Important: Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update

Updated qemu-kvm-rhev packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring Syste...

Sony Hackers Threaten 9/11 Type Attack at Theaters Showing 'The Interview' Movie

The massive hacking attack against Sony Pictures Entertainment has yet exposed about 200 gigabytes of confidential data belonging to the company from upcoming movie scripts to sensitive employees data, celebrities phone numbers and their travel aliases, and also the high-quality versions of five...

Blackhat – Upcoming Cyber Thriller Movie

"Hacking" is not just popular among cyber security experts and criminals, but also is a great interest for movies industries as well. Hollywood movies such as 1995 released Hackers and 2001 released Swordfish are examples of it, and now Chris Hemsworth's new flick Blackhat. Blackhat – An upcoming...

CentOS 6 : libguestfs (CESA-2013:1536)

Updated libguestfs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

RHEL 6 : qemu-kvm-rhev (RHSA-2014:0744)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0744 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...

[SECURITY] [DLA 58-2] apt regression fix

Package : apt Version : 0.8.10.3+squeeze6 CVE ID : CVE-2014-6273 This update fixes a regression introduced in 0.8.10.3+squeeze5 where apt would send invalid HTTP requests when sending If-Range queries. Thanks to Steven McDonald who reported1 the regression and to Michael Vogt for having uploaded ...

WordPress Contact Form DB 2.8.13 Cross Site Scripting Vulnerability

WordPress Contact Form DB plugin version 2.8.13 suffers from a cross site scripting vulnerability. Product: Contact Form DB WordPress plugin Vendor: Michael Simpson Vulnerable Versions: 2.8.13 and probably prior Tested Version: 2.8.13 Advisory Publication: September 17, 2014 without technical...

WordPress Contact Form DB 2.8.13 Cross Site Scripting

Advisory ID: HTB23233 Product: Contact Form DB WordPress plugin Vendor: Michael Simpson Vulnerable Versions: 2.8.13 and probably prior Tested Version: 2.8.13 Advisory Publication: September 17, 2014 without technical details Vendor Notification: September 17, 2014 Vendor Patch: September 25, 2014...

CVE-2014-5539

The Michael Baker FCU aka air.com.creditunionhomebanking.mb155 application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Michael Baker FCU aka air.com.creditunionhomebanking.mb155 application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5539

The Michael Baker FCU aka air.com.creditunionhomebanking.mb155 application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5539

CVE-2014-5539 affects the Michael Baker FCU Android app (package air.com.creditunionhomebanking.mb155) version 1.2.0. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, which allows a man-in-the-middle to spoof servers and obtain sensitive information via a cra...

Anonymous Hackers Claim to Identify the Cop Who killed Mike Brown in Ferguson

Members of the international hacker collective Anonymous have claimed they have identified the Ferguson, Missouri law enforcement officer involved in the fatal shooting of Michael Brown, an unarmed teenager killed on Saturday, which sparked days of protest and raised racial tensions. The hacktivi...

D-Link Devices - 'info.cgi' POST Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link info.cgi POST Request Buffer Overflow', 'Description' = %q This module exploits an anonymous remote code execution vulnerabili...

Michael Schatz Books 0.54/0.6 PostNuke Module Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5882/info Books is a module written for PostNuke. Reportedly, Books is prone to cross site scripting attacks. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link containing HTML...

Raidsonic IB-NAS5220 and IB-NAS4220-B - Multiple Vulnerabilities

No description provided by source. Device Name: IB-NAS5220 / IB-NAS4220-B Vendor: Raidsonic ============ Vulnerable Firmware Releases: ============ Product Name IB-NAS5220 / IB-NAS4220-B Tested Firmware IB5220: 2.6.3-20100206S Tested Firmware IB4220: 2.6.3.IB.1.RS.1 Firmware Download:...