smb.e-mordovia.ru XSS vulnerability

Vulnerable URL:...

Threat Outbreak Alert RuleID23824: Email Messages Distributing Malicious Software on July 13, 2016

Medium Alert ID: 47069 First Published: 2016 July 13 16:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23824 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID22527: Email Messages Distributing Malicious Software on April 27, 2016

Medium Alert ID: 44874 First Published: 2016 April 27 16:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22527 may contain the following files: Name | Si...

PT-2016-2810

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.3 Description The issue is related to a password hashing error in the ssh network protocol. When SHA256 or SHA512 are used for user password hashing, a timing difference in responses can be leveraged by remote...

RHEL 7 : kernel-rt (RHSA-2016:0065)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0065 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. A use-after-free flaw was found in the way the Linux kernel's k...

jotzo.com XSS vulnerability

Vulnerable URL: http://www.jotzo.com/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2015:2636 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...

Potential Command Injection

Overview Versions 2.4.3 and earlier of hubot-scripts are vulnerable to a command injection vulnerablity in the hubot-scripts/package/src/scripts/email.coffee module. Mitigating Factors The email script is not enabled by default, it has to be manually added to hubot's list of loaded scripts...

Gentoo Security Advisory GLSA 201309-02

Gentoo Linux Local Security Checks GLSA 201309-02 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Threat Outbreak Alert RuleID17680: Email Messages Distributing Malicious Software on September 1, 2015

Medium Alert ID: 40756 First Published: 2015 September 2 13:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17680 may contain the following files: Name |...

Joomla! Component com_memorix - SQL Injection

Exploit Title: Joomla commemorix component SQL Injection vulnerability Date: 13-08-2015 Software Link: N/A Exploit Author: Omar AbuHassan Contact: https://www.linkedin.com/pub/omar-abu-hassan/bb/600/960 CVE: N/A Category: webapps Version: All Tested on: Kali linux x64 / Windows 8.1 pro x64 1...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Jul 2015) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

secpub

SecPub Published security vulnerabilities, research, write-up...

PT-2014-2451

Name of the Vulnerable Software and Affected Versions Bundler versions prior to 1.7 Description The issue allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source when multiple top-level source lines are used. Recommendations For...

PT-2017-9942 · Cairo +3 · Cairo +3

Name of the Vulnerable Software and Affected Versions: cairo version 1.14.6 Description: The issue is related to an integer overflow in the write png function, which can be triggered by remote attackers using a large svg file. This can cause a denial of service due to an invalid pointer...

RHEL 6 / 7 : java-1.7.0-openjdk (RHSA-2014:1620)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1620 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple...

Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20140903)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2014-1562, CVE-2014-1567 After installing the update, Firefox must...

SOL15404 - OpenSSL vulnerability CVE-2009-3245

Recommended action You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the previous table. If the Versions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade...

Linux Kernel 2.6.x - 'add_to_page_cache_lru()' Local Denial of Service Vulnerability

Linux Kernel 'addtopagecachelru'本地拒绝服务漏洞 漏洞类型： 设计缺陷 exp: global bs=8k iodepth=1024 iodepthbatch=60 randrepeat=1 size=1m directory=/home/oracle numjobs=20 job1 ioengine=sync bs=1k direct=1 rw=randread filename=file1:file2 job2 ioengine=libaio rw=randwrite direct=1 filename=file1:file2 job3 bs=1k...

MailMax <= 4.6 - POP3 "USER" Remote Buffer Overflow Exploit (No Login Needed)

No description provided by source. !/usr/bin/python MailMax =v4.6 POP3 USER Remote Buffer Overflow Exploit No Login Needed Newer version's not tested, maybe vulnerable too A hard one this, the shellcode MUST be lowercase. Plus there are many opcode's that break the payload and opcodes that gets...