NewStart CGSL MAIN 4.05 : ghostscript Vulnerability (NS-SA-2019-0145)

The remote NewStart CGSL host, running version MAIN 4.05, has ghostscript packages installed that are affected by a vulnerability: - It was discovered that the ghostscript /invalidaccess checks fail under certain conditions. An attacker could possibly exploit this to bypass the -dSAFER protection...

NewStart CGSL CORE 5.04 / MAIN 5.04 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0040)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has java-1.7.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Sound. Supported versions that are...

NewStart CGSL MAIN 5.04 : libreoffice Vulnerability (NS-SA-2019-0013)

The remote NewStart CGSL host, running version MAIN 5.04, has libreoffice packages installed that are affected by a vulnerability: - A flaw was found in libreoffice before 5.4.5 and before 6.0.1. Arbitrary remote file disclosure may be achieved by the use of the WEBSERVICE formula in a specially...

NewStart CGSL MAIN 4.05 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0169)

The remote NewStart CGSL host, running version MAIN 4.05, has thunderbird packages installed that are affected by multiple vulnerabilities: - Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a...

NewStart CGSL MAIN 4.05 : libvirt Multiple Vulnerabilities (NS-SA-2019-0152)

The remote NewStart CGSL host, running version MAIN 4.05, has libvirt packages installed that are affected by multiple vulnerabilities: - Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is...

NewStart CGSL MAIN 4.05 : samba4 Vulnerability (NS-SA-2019-0128)

The remote NewStart CGSL host, running version MAIN 4.05, has samba4 packages installed that are affected by a vulnerability: - A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash...

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0164)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed paren...

Command Execution Vulnerability in Netcom WAN Acceleration Gateway

Netcom WAN optimization gateway NS-WOG is the latest technological innovation from Netcom. WAN optimization, also commonly referred to as WAN acceleration. A command execution vulnerability exists in the Netcom WAN acceleration gateway. It allows attackers to exploit the vulnerability to execute...

Product update: Virtuozzo Infrastructure Platform 3.0 Update 1.1 (3.0.1-59)

This update provides stability fixes. Vulnerability id: VSTOR-25491 ABGW Acronis Backup Gateway could reject Acronis Backup Advanced certificates. Vulnerability id: VSTOR-25625 S3 NS services could fail to start...

CVE-2016-10824

CVE-2016-10824 affects cPanel prior to 55.9999.141. The vulnerability enables unauthenticated arbitrary code execution via DNS NS entry poisoning. Public details in the provided connected sources are limited to the affected version and impact; no root-cause specifics or remediation steps are desc...

CVE-2016-10824

cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-90...

CVE-2016-10858

CVE-2016-10858 affects cPanel before 11.54.0.0, allowing unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64). Data: multiple sources confirm impact on the cPanel product; remediation indicated is upgrading to 11.54.0.0 or later. Exploitation details and in-the-wild status...

CVE-2019-10162

PowerDNS Authoritative Server vulnerability CVE-2019-10162 affects versions prior to 4.1.10 and 4.0.8. An authorized user can cause the server to terminate by inserting a crafted MASTER zone record, triggered when the server parses NS/A/AAAA data for an outgoing NOTIFY. The issue is tied to how p...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service attacks. A remote, unauthenticated attacker could potentially use the flawed LDAP Search Filter component to make ns-slapd crash via a specially crafted LDAP request resulting in a system crash...

Omron NS HMIs 8.1xx <= 8.68x CSRF

Binary data 720046.prm...

Omron NS HMIs 8.1xx <= 8.68x XSS

Binary data 720047.prm...

Omron NS HMIs 1.1 and <= 1.3 Bypass Authentication

Binary data 720177.prm...

SUSE SLED12 / SLES12 Security Update : ucode-intel (SUSE-SU-2019:0736-1)

This update for ucode-intel fixes the following issues : Updated to the 20190312 bundle release bsc1129231 New Platforms : AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile CFL-S P0 6-9e-c/22 000000a2 Core Gen9...

Got-Responded - A Simple Tool To Detect NBT-NS And LLMNR Spoofing

Pentesters, Redteamers and even real attackers love to use tools like Responder to spoof LLMNR and/or NBT-NS responses. There are some awesome other tools to help with detection, such as respounder. But I wanted to figure it out for my self, and at the same time add a way to push "honey" tokens...