Moonpig API Vulnerability Exposes Payment Card Data

Moonpig, a U.K.-based company that sells personalized greeting cards, mugs, t-shirts and other novelties, has been taken to the woodshed for poor security practices by a researcher who claims it’s simple to pilfer user and payment card data through a wonky mobile app API. The company this morning...

Fedora 19 : mingw-pcre-8.33-4.fc19 (2014-17626)

Fix CVE-2014-8964 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

Fedora 19 : kernel-3.14.27-100.fc19 (2014-17244)

The 3.14.27 stable update contains a number of important fixes across the tree.\nThe 3.14.26 update contains a number of important fixes across the tree\nThe 3.14.25 stable update contains a number of important fixes across the tree.\nThe 3.14.24 stable update contains a number of important fixes...

Fedora 20 : subversion-1.8.11-1.fc20 (2014-17222)

This update includes the latest stable release of Apache Subversion, version 1.8.11. Two security issues in moddavsvn are addressed in this release CVE-2014-8108, CVE-2014-3580. For more details, see : http://subversion.apache.org/security/CVE-2014-8108-advisory.txt...

Fedora 19 : denyhosts-2.6-28.fc19.1 (2014-17081)

Fix security bug Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 21 : subversion-1.8.11-1.fc21 (2014-17118)

This update includes the latest stable release of Apache Subversion, version 1.8.11. Two security issues in moddavsvn are addressed in this release CVE-2014-8108, CVE-2014-3580. For more details, see : http://subversion.apache.org/security/CVE-2014-8108-advisory.txt...

Tcpcrypt - Encrypting the Internet

Tcpcrypt is a protocol that attempts to encrypt almost all of your network traffic. Unlike other security mechanisms, Tcpcrypt works out of the box: it requires no configuration, no changes to applications, and your network connections will continue to work even if the remote end does not support...

Fedora 21 : mailx-12.5-14.fc21 (2014-17243)

Security fix for CVE-2004-2771, CVE-2014-7844 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 20 : ettercap-0.8.1-2.fc20 (2014-17107)

Fix for multiple CVEs. https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi- 1402/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

IBM Network Security Protection XGS Remote Code Execution (swg21690823) (credentialed attack)

Binary data ibmxgscmdexswg21690823.nbin...

IBM Network Security Protection XGS Remote Code Execution (swg21690823) (credentialed check)

The firmware version installed on the remote IBM XGS appliance does not properly sanitize certain user-supplied inputs which can allow a remote, authenticated attacker to execute shell commands with the privileges of the 'www-data' user via a standard HTTP request. C Tenable Network Security, Inc...

IBM Network Security Protection XGS Default Credentials

Nessus was able to login to the remote IBM Network Security Protection XGS device using a known set of default credentials. This allows a remote attacker to gain administrative access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

IBM Network Security Protection XGS WebUI Detection

Binary data ibmxgswebuidetect.nbin...

Fedora 20 : php-5.5.20-2.fc20 (2014-17229)

18 Dec 2014, PHP 5.5.20\r\n\r\nCore:\r\n Fixed bug 68091 Some Zend headers lack appropriate extern 'C' blocks. Adam\r\n Fixed bug 68185 'Inconsistent insteadof definition.'- incorrectly triggered. Julien\r\n Fixed bug 68370 'unset$this' can make the program crash. Laruence\r\n Fixed bug 68545 NUL...

Fedora 19 : seamonkey-2.31-1.fc19 (2014-17217)

Update to 2.31 Fixes various security issues, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 21 : nss-3.17.3-2.fc21 (2014-17085)

Updated nss package fixes a conflict among the nss-tools pp man page an the similarly named one from perl-PARPackager. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

[SECURITY] Fedora 21 Update: nss-3.17.3-2.fc21

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

CVE-2014-7999

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565...

GitHub < 1.9.4 .git/config Command Execution (Mac OS X)

The remote Mac OS X host has a version of GitHub prior to 194 installed. It is, therefore, affected by a remote command execution vulnerability when processing git trees in a case-insensitive or case-normalizing file system. A remote attacker, using a specially crafted git tree, can overwrite a...

The SS7 network to save significant vulnerability that everyone can monitor mobile phones-vulnerability warning-the black bar safety net

Recently, German researchers found that the mobile security vulnerabilities these vulnerabilities enable hackers, spies and criminals take advantage of, you can large-scale wiretapping of private telephone and steal a mobile phone short message, even if the mobile phone network using the current...