Threat Outbreak Alert RuleID17680: Email Messages Distributing Malicious Software on September 1, 2015

Medium Alert ID: 40756 First Published: 2015 September 2 13:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17680 may contain the following files: Name |...

Joomla! Component com_memorix - SQL Injection

Exploit Title: Joomla commemorix component SQL Injection vulnerability Date: 13-08-2015 Software Link: N/A Exploit Author: Omar AbuHassan Contact: https://www.linkedin.com/pub/omar-abu-hassan/bb/600/960 CVE: N/A Category: webapps Version: All Tested on: Kali linux x64 / Windows 8.1 pro x64 1...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Jul 2015) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

secpub

SecPub Published security vulnerabilities, research, write-up...

PT-2014-2451

Name of the Vulnerable Software and Affected Versions Bundler versions prior to 1.7 Description The issue allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source when multiple top-level source lines are used. Recommendations For...

PT-2017-9942 · Cairo +3 · Cairo +3

Name of the Vulnerable Software and Affected Versions: cairo version 1.14.6 Description: The issue is related to an integer overflow in the write png function, which can be triggered by remote attackers using a large svg file. This can cause a denial of service due to an invalid pointer...

RHEL 6 / 7 : java-1.7.0-openjdk (RHSA-2014:1620)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1620 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple...

Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20140903)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2014-1562, CVE-2014-1567 After installing the update, Firefox must...

SOL15404 - OpenSSL vulnerability CVE-2009-3245

Recommended action You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the previous table. If the Versions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade...

Linux Kernel 2.6.x - 'add_to_page_cache_lru()' Local Denial of Service Vulnerability

Linux Kernel 'addtopagecachelru'本地拒绝服务漏洞 漏洞类型： 设计缺陷 exp: global bs=8k iodepth=1024 iodepthbatch=60 randrepeat=1 size=1m directory=/home/oracle numjobs=20 job1 ioengine=sync bs=1k direct=1 rw=randread filename=file1:file2 job2 ioengine=libaio rw=randwrite direct=1 filename=file1:file2 job3 bs=1k...

MailMax <= 4.6 - POP3 "USER" Remote Buffer Overflow Exploit (No Login Needed)

No description provided by source. !/usr/bin/python MailMax =v4.6 POP3 USER Remote Buffer Overflow Exploit No Login Needed Newer version's not tested, maybe vulnerable too A hard one this, the shellcode MUST be lowercase. Plus there are many opcode's that break the payload and opcodes that gets...

Adobe AIR Multiple Vulnerabilities-01 (Jun 2014) - Windows

Adobe Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:adobeair"; ifdescription...

PT-2014-18: Weak encryption of account data in Wonderware Information Server

The specialists of the Positive Research center have detected a Weak encryption of account data vulnerability in Wonderware Information Server. Encryption of WIS is insufficient. This vulnerability could allow elevation of privileges if an attacker decrypts the credentials. The system would need ...

PT-2014-54: Heap-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Heap-based buffer overflow vulnerability in Honeywell EPKS. Heap-based buffer overflow was discovered in ripsd.exe module in function secGetContext which could lead to possible remote code execution or denial of service. How to fix...

KLA10281 OSI vulnerability in OpenVPN

An unspecified vulnerability was found in OpenVPN. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a timing attack. Original advisories - Related products OpenVPN CVE list CVE-2013-2061 warning Solution Update to...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20130926)

This update fixes the following security issues : - A use-after-free flaw was found in the madvise system call implementation in the Linux kernel. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their privileges. CVE-2012-3511, Moderate - A fl...

Fedora Update for libtiff FEDORA-2013-15679

Check for the Version of libtiff OpenVAS Vulnerability Test Fedora Update for libtiff FEDORA-2013-15679 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2013-3148

creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187 2025-08-31 03:01:15+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:51+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

Oracle Linux 5 : kernel (ELSA-2013-0621)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0621 advisory. - utrace ensure archptrace can never race with SIGKILL Oleg Nesterov 912071 912072 CVE-2013-0871 Tenable has extracted the preceding description block...

Fedora Update for kdemultimedia FEDORA-2013-10182

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...