Scientific Linux Security Update : Important: 389-Ds-Base Security Update on SL7.x srpm/x86_64

A flaw was found in the way the Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server. CVE-2015-1854 After...

Mandriva Linux Security Advisory : python-numpy (MDVSA-2015:077)

Updated python-numpy packages fix security vulnerabilities : f2py insecurely used a temporary file. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running f2py CVE-2014-1858, CVE-2014-1859. %NASLMINLEVEL 70300 C Tenable...

Traffic Networks Firm Patches Sensor Vulnerabilities

A year after it was notified about a security vulnerability, a company in charge of manufacturing sensors used in traffic control systems has patched a series of previously disclosed bugs that could have opened the products up to a handful of exploits. A warning from the Industrial Control System...

Fedora 20 : perl-Plack-1.0031-1.fc20 (2014-9542)

---------------------------------------------------------------------- ---------- ChangeLog : - Fri Aug 8 2014 Ralf Corsepius - 1.0031-1 - Upstream update. - Thu Jan 16 2014 Ralf Corsepius - 1.0030-3 - Move misplaced %exclude-line from base-package to -Test. - Wed Jan 15 2014 Ralf Corsepius -...

Router ONO Hitron CDE-30364 - CSRF Vulnerability

No description provided by source. Exploit Title: Router ONO Hitron CDE-30364 - CSRF Vulnerability Date: 14-9-2013 Exploit Author: Matias Mingorance Svensson - matias.msatowasp.org Vendor Homepage: http://www.ono.es/clientes/te-ayudamos/dudas/internet/equipos/hitron/hitron-cde-30364/ Tested on:...

Seyeon FlexWATCH Network Video Server 2.2 Unauthorized Administrative Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8942/info It has been reported that FlexWATCH Network Video Server may be prone to an access validation error that may allow a remote attacker to gain administrative access to the system. The problem is reported to presen...

Modern sky any order unauthorized modifications-vulnerability warning-the black bar safety net

I heard that modern sky sent the tickets, get to. Require the year tickets! Norman Jade on! Goddess! I'm coming! （Vulnerability demonstration using your own test account, the story is this, there once was a handsome than the and an ugly ratio. A handsome than buying a heavens laugh, the shipping...

Microsoft OneDrive Secretly Modifies your BackUp Files

Until now, our privacy has been violated by many big Internet Services, including Google who uses our personal information for the advertising purposes and this is exactly how the companies handle the mass of personal data we provide them. But, recent report about another big giant Microsoft show...

The security po-warning Internet financial risks, website vulnerabilities or to“fatal point”-bug warning-the black bar safety net

ZDNET security channels 0 2 on 2 1-day comprehensive news: recently, Alipay was traced to the presence of security vulnerabilities, caused people to the Internet financial security concerns. With the rapid development of Internet, attract a lot of hackers“gather in”. Especially the recent hot...

[MIDAS] Mac Intrusion Detection Analysis System

MIDAS is a framework for developing a Mac Intrusion Detection Analysis System, based on work and collaborative discussions between the Etsy and Facebook security teams. This repository provides a modular framework and a number of helper utilities, as well as an example module for detecting...

Authentication flaw

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340...

CVE-2014-0653

The Cisco ASA Identity Firewall (IDFW) NetBIOS logout probe vulnerability (CVE-2014-0653) stems from insufficient validation of NetBIOS probe responses, allowing an unauthenticated remote attacker to modify a user’s authentication state. Cisco notes the issue in Cisco-SA-20140108-CVE-2014-0653 an...

CVE-2013-6367

The apicgettmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service divide-by-zero error and host OS crash via crafted modifications of the TMICT value...

CVE-2013-3472

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

CVE-2013-3472

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

Design/Logic Flaw

The web interface on the Dell iDRAC6 with firmware before 1.95 allows remote attackers to modify the CLP interface for arbitrary users and possibly have other impact via a request to an unspecified form that is accessible from testurls.html. NOTE: the vendor disputes the significance of this issu...

Scientific Linux Security Update : samba and samba3x on SL5.x, SL6.x i386/x86_64 (20120430)

Samba is an open source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw was found in the way Samba handled certain Local Security Authority LSA Remote Procedure...

java-1.6.0-openjdk security update

1.6.0.0-1.27.1.10.8.0.1.el58 - Add oracle-enterprise.patch 1:1.6.0.0-1.27.1.10.8 - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch: - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils. - packages added also to package.definition - Resolves:...

[ MDVSA-2012:067 ] samba

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:067 http://www.mandriva.com/security/ Package : samba Date : May 1, 2012 Affected: 2010.1, 2011. Problem Description: A vulnerability has been found and corrected in samba: Security checks were incorrectly...