8579 matches found
Mitsubishi Outlander mixing vehicles storage security breaches-hacking-vulnerability warning-the black bar safety net
According to the BBC 6 on 6 reported, the researchers found that the Mitsubishi Outlander hybrid vehicle Wi-Fi there is a security vulnerability, easy hacking, and turn off the vehicle alarm system. This means that criminals could exploit the vulnerability into the vehicle or steal the vehicle, o...
WordPress Newspaper 6.7.1 Theme - Privilege Escalation
Exploit for php platform in category web applications Vendor Homepage: http://tagdiv.com/newspaper/ Software Link: http://themeforest.net/item/newspaper/5489609 Version: 6.7.1 Tested on: Debian 8, PHP 5.6.17-3 Type: WP Options Overwrite, Possible more Time line: Found 23-APR-2016, Vendor notified...
WordPress Theme Newspaper 6.7.1 - Privilege Escalation
WordPress Theme Newspaper 6.7.1 - Privilege Escalation Vendor Homepage: http://tagdiv.com/newspaper/ Software Link: http://themeforest.net/item/newspaper/5489609 Version: 6.7.1 Tested on: Debian 8, PHP 5.6.17-3 Type: WP Options Overwrite, Possible more Time line: Found 23-APR-2016, Vendor notifie...
WordPress Theme Newspaper 6.7.1 - Privilege Escalation
Vendor Homepage: http://tagdiv.com/newspaper/ Software Link: http://themeforest.net/item/newspaper/5489609 Version: 6.7.1 Tested on: Debian 8, PHP 5.6.17-3 Type: WP Options Overwrite, Possible more Time line: Found 23-APR-2016, Vendor notified 23-APR-2016, Vendor fixed: 27-APR-2016, RD:1 /...
Oracle MySQL Multiple Unspecified Vulnerabilities - 16 (Jun 2016) - Linux
Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2016:1459-1 Security update for cyrus-imapd
This update for cyrus-imapd fixes the following issues: - Previous versions of cyrus-imapd would not allow its users to disable old SSL variants that are vulnerable to attacks like BEAST and POODLE. This patch adds the configuration option 'tlsversions' to remedy that issue. Note that users who...
openSUSE Security Update : mysql-community-server (openSUSE-2016-607)
This mysql-community-server version update to 5.6.30 fixes the following issues : Security issues fixed : - fixed CVEs boo962779, boo959724: CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640, CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649,...
Security update for mysql-community-server (important)
This mysql-community-server version update to 5.6.30 fixes the following issues: Security issues fixed: - fixed CVEs boo962779, boo959724: CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640, CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649,...
IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2016-03222)
IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions and relationships. A security vulnerability in IBM Sterling B2B Integrator exists when the program uses the HTTP OPTIONS method, allowing a remote attacker to obtain sensitive information by...
kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets.
It was found that the Linux kernel's IPv6 implementation mishandled socket options. A local attacker could abuse concurrent access to the socket options to escalate their privileges, or cause a denial of service use-after-free and system crash via a crafted sendmsg system call...
ntp: ntpd crash when processing config commands with statistics type
It was found that ntpd would exit with a segmentation fault when a statistics type that was not enabled during compilation e.g. timingstats was referenced by the statistics or filegen configuration command...
Open-Xchange: nginx server vulnerable
1 Vulnerability: Clickjacking Vulnerable Domain: lists.dovecot.fi Vulnerable URL: http://lists.dovecot.fi/?C=N;O=D%3Cscript%3Ealert%22Thalaivarsubu%22%3C/script%3E Browser version: Google Chrome 50.0.2661.94 Operating system: Windows 7 Steps to Reproduce: iframe width: 800px; height: 500px;...
mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016)
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options...
mysql: unspecified vulnerability in subcomponent: Server: Options (CPU April 2016)
Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Options...
Oracle MySQL 5.6.x < 5.6.29 Multiple Vulnerabilities (April 2016 CPU)
The version of Oracle MySQL installed on the remote host is 5.6.x prior to 5.6.29. It is, therefore, affected by the following vulnerabilities : - A NULL pointer dereference flaw exists in the bundled version of OpenSSL in file rsaameth.c due to improper handling of ASN.1 signatures that are...
Oracle MySQL 5.7.x < 5.7.11 Multiple Vulnerabilities (April 2016 CPU) (July 2016 CPU)
The version of Oracle MySQL installed on the remote host is 5.7.x prior to 5.7.11. It is, therefore, affected by the following vulnerabilities : - A NULL pointer dereference flaw exists in the bundled version of OpenSSL in file rsaameth.c due to improper handling of ASN.1 signatures that are...
The vulnerability of the Apache ActiveMQ software platform allows attackers to deploy malicious elements on a page and force users to activate them.
The vulnerability of the Apache ActiveMQ software platform’s web console is related to errors in sending the X-Frame-Options HTTP header. Exploiting this vulnerability allows a malicious actor to deploy malicious elements on a website and force users to activate them through specially crafted web...
DARPA Wants To Build Ultra Secure Messaging App for US Military
Just last month, DARPA launched a project dubbed "Improv," inviting hackers to transform simple household appliances into deadly weapons. Now, the Defense Advanced Research Projects Agency is finding someone in the private sector to develop a hacker-proof "secure messaging and transaction platfor...
Oracle MySQL Server:Options Subcomponent Denial of Service Vulnerability
Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in the Server:Options subcomponent of Oracle MySQL versions 5.6.28 and earlier and 5.7.10 and earlier, which can be exploited by an attacker to cause a denial of service and impact da...