2448 matches found
Debian Security Advisory DSA 3120-1 (mantis - security update)
Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. OpenVAS Vulnerability Test $Id: deb3120.nasl 6609 2017-07-07 12:05:59Z...
CVE-2014-7993
Cisco Meraki HTTP Handler Local Information Disclosure vulnerability (CVE-2014-7993) affects Cisco Meraki MS, MR, and MX devices with firmware prior to 2014-09-24. An HTTP handler that does not require requests to originate from the Meraki cloud allows LAN-adjacent attackers to obtain sensitive c...
[SECURITY] Fedora 21 Update: mantis-1.2.18-1.fc21
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis When t...
[SECURITY] Fedora 19 Update: mantis-1.2.18-1.fc19
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.2.18...
[SECURITY] Fedora 20 Update: antiword-0.37-17.fc20
Antiword is a free MS-Word reader for Linux, BeOS and RISC OS. It converts the documents from Word 6, 7, 97 and 2000 to ASCII and Postscript. Antiword tries to keep the layout of the document intact...
[SECURITY] Fedora 19 Update: antiword-0.37-17.fc19
Antiword is a free MS-Word reader for Linux, BeOS and RISC OS. It converts the documents from Word 6, 7, 97 and 2000 to ASCII and Postscript. Antiword tries to keep the layout of the document intact...
[SECURITY] Fedora 20 Update: mantis-1.2.17-4.fc20
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis When t...
[SECURITY] Fedora 19 Update: mantis-1.2.17-4.fc19
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.2.17...
THC-Hydra 8.1 - Network Logon Cracker
A very fast network logon cracker which support many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of concept...
Lime Survey 2-05+ Multiple Vulnerabilities
Lime Survey Multiple Vulnerabilities ======================================================================= ADVISORY INFORMATION Title: Lime Survey Multiple Vulnerabilities Discovery date: 02/07/2014 Release date: 03/07/2014 Vendor Homepage: www.limesurvey.org Version: Lime Survey 2.05+ Build...
Immunity Canvas: SANDWORM
Name| sandworm ---|--- CVE| CVE-2014-4114 Exploit Pack| CANVAS Description| Sandworm - MS14-060 - Windows OLE Remote Code Execution Vulnerability. Notes| Repeatability: Infinite Notes: This exploit creates a blank PPSX file Powerpoint show presentation, to use it you just have to add some stuff t...
MS KB3009008: Vulnerability in SSL 3.0 Could Allow Information Disclosure (POODLE)
The remote host is missing one of the workarounds referenced in the Microsoft Security Advisory 3009008. If the client registry key workaround has not been applied, any client software installed on the remote host including IE is affected by an information disclosure vulnerability when using SSL...
MS KB3001237: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer
The remote host is missing KB3001237. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues due to improperly sanitized user-supplied input allow arbitrary code execution. CVE-2014-0564, CVE-2014-0558 - An integer overflow issue due to improperly...
[SECURITY] Fedora 21 Update: mantis-1.2.17-3.fc21
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis When t...
[SECURITY] Fedora 19 Update: mantis-1.2.17-3.fc19
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.2.17...
[SECURITY] Fedora 21 Update: apache-poi-3.10.1-1.fc21
The Apache POI Project's mission is to create and maintain Java APIs for manipulating various file formats based upon the Office Open XML standards OOXML and Microsoft's OLE 2 Compound Document format OLE2. In short, you can read and write MS Excel files using Java. In addition, you can read and...
Authentication flaw
The 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong authentication methods, which allows remote attackers to calculate credentials by offering LEAP authentication from a crafted Wi-Fi AP and then performing a cryptographic attack against the MS-CHAPv1 hash...
MS CALENDAR Cloud Service Detection
Binary data 8481.prm...