OpenSSH 7.x < 7.3 Multiple Vulnerabilities

Binary data 9507.prm...

Low: mod24_nss

Issue Overview: It was reported that +CIPHER operator in OpenSSL changes the order of a cipher. Instead of returning an error as NSS does not support cipher ordering, it returned the result of processing up to that point, which could result in requested ciphers not being enabled. Affected Package...

pizza.de - order food online - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application pizza.de - order food online published at the 'play' market has multiple vulnerabilities...

CVE-2015-5271

CVE-2015-5271 affects TripleO Heat templates: the swiftproxy pipeline does not properly order Keystone before Swift staticweb middleware when staticweb is enabled, potentially allowing remote attackers to obtain sensitive information from private containers via unspecified vectors. This is docume...

CVE-2015-5271

The TripleO Heat templates tripleo-heat-templates do not properly order the Identity Service keystone before the OpenStack Object Storage Swift staticweb middleware in the swiftproxy pipeline when the staticweb middleware is enabled, which might allow remote attackers to obtain sensitive...

Fedora 22 : php-horde-horde-5.2.8-1.fc22 / php-horde-imp-6.2.11-1.fc22 / php-horde-ingo-3.2.7-1.fc22 / etc (2015-37090f89d8)

horde 5.2.8 mjr SECURITY: Protect against CSRF attacks on various admin pages. jan Don't apply access keys to checkbox and radiobox rows in the sidebar Bug 14103. jan Send correct MIME type for non-statically cached JavaScript files. mjr Added configuration support for version 2 of...

Fedora 23 : php-horde-horde-5.2.8-1.fc23 / php-horde-imp-6.2.11-1.fc23 / php-horde-ingo-3.2.7-1.fc23 / etc (2015-46c331cb4e)

horde 5.2.8 mjr SECURITY: Protect against CSRF attacks on various admin pages. jan Don't apply access keys to checkbox and radiobox rows in the sidebar Bug 14103. jan Send correct MIME type for non-statically cached JavaScript files. mjr Added configuration support for version 2 of...

infomaniak.com XSS vulnerability

Vulnerable URL: https://www.infomaniak.com/fr/domaines/commander?sDomain=alert/XSSPOSED/...

infomaniak.ch XSS vulnerability

Vulnerable URL: https://www.infomaniak.ch/fr/domaines/commander?sDomain=alert/XSSPOSED/...

unbound security and bug fix update

1.4.20-26 - Added Conficts on redhat-release packages without unbound-anchor.timer in presets Related 1215645 1.4.20-25 - Resolve ordering loop with nss-lookup.target and ntpdate 1259806 1.4.20-24 - Fix CVE-2014-8602 1253961 1.4.20-23 - Removed usage of DLV from the default configuration 1223339...

[SECURITY] Fedora 22 Update: MUMPS-5.0.1-4.fc22

MUMPS implements a direct solver for large sparse linear systems, with a particular focus on symmetric positive definite matrices. It can operate on distributed matrices e.g. over a cluster. It has Fortran and C interfaces, and can interface with ordering tools such as Scotch...

[SECURITY] Fedora 21 Update: MUMPS-5.0.1-4.fc21

MUMPS implements a direct solver for large sparse linear systems, with a particular focus on symmetric positive definite matrices. It can operate on distributed matrices e.g. over a cluster. It has Fortran and C interfaces, and can interface with ordering tools such as Scotch...

[SECURITY] Fedora 21 Update: metis-5.1.0-7.fc21

METIS is a set of serial programs for partitioning graphs, partitioning finite element meshes, and producing fill reducing orderings for sparse matrices. The algorithms implemented in METIS are based on the multilevel recursive-bisection, multilevel k-way, and multi-constraint partitioning scheme...

Moderate: Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform 7 director update

Updated packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 7.0 director for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common...

Oracle: Security Advisory (ELSA-2008-0885)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-2021)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

方维在线订餐系统权限绕过可删除信息两处打包 (Demo)

简要描述： 两处权限绕过嘿嘿 详细说明： 这里有官方的演示:http://www.fanwe.com/dc 首先我们注册两个帐号 一个是测试帐号1 一个是测试帐号2 然后我们在测试帐号2的外卖配送地址修改并且抓包 我们可以看到这里有一个id=27 然后我再去测试帐号1修改外卖配送地址并且抓包 我们可以看到这里有一个Id=28 我们把他改为测试帐号2的id=27并且提交 提交成功了 我们再回到测试帐号2看看 我们发现测...

xdcms网上订餐系统 sql注入

简要描述： rt 详细说明： 老问题了，订餐系统与企业管理系统 有着相似的地方。。于是就找到了一处注入。 官网演示。 注册用户后，修改资料。 改包 ，字段处加个 fields%5Btitle%5D=a&fields%5Btruename%5D=a&fields%5Btelephone%5D=a&fields%5Baddress%5D=a&fields%5Bcontent%5D=a&verifycode=1adf&submit=+%E6%8F%90+%E4%BA%A4+ 发现 报错了...

openSUSE Security Update : strongswan (openSUSE-SU-2015:0114-1)

This update fixes the following security issues : - denial-of-service vulnerability, which can be triggered by an IKEv2 Key Exchange payload, that contains the Diffie-Hellman group 1025 bsc910491,CVE-2014-9221. - Applied an upstream patch reverting to store algorithms in the registration order...

CVE-2014-8475

FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking sshd, which causes symbols to be resolved incorrectly and allows remote attackers to cause a denial of service sshd deadlock and prevention of new connections by ending multiple...