Android Wi-Fi Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of Wi-Fi in versions prior to Android 5.1.1 LMY48Z, which can be exploited by remote attackers to obtain sensitive information...

FFmpeg 'jpeg2000_read_main_headers' Function Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video. A denial of service vulnerability exists in the jpeg2000readmainheaders function in the libavcodec/jpeg2000dec.c file in FFmpeg versions prior to 2.6.5, 2.7.x versions prior to 2.7.3, and 2.8.2 and prior 2.8.x...

QARK - Tool to look for several security related Android application vulnerabilities

Q uick A ndroid R eview K it - This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

ownCloud: owncloud.com: WP Super Cache plugin is outdated

I know it might be out of scope, but I report it to be sure https://owncloud.org/wp-content/plugins/wp-super-cache/readme.txt shows version 1.4.4 and this version is prone to XSS and PHP Object injection http://z9.io/2015/09/25/wp-super-cache-1-4-5/...

Adobe AIR < 18.0.0.180 Multiple Vulnerabilities (APSB15-16)

Binary data 8858.prm...

ownCloud: owncloud.com: Outdated plugins contains public exploits

hey There were many outdated plugins that has may public exploits available , it is strongly suggested to update these . WPML to 3.1.9 sitepress multilingual cms to 3.1.72 google analyticator to 6.9.4.4 Kindly fix these...

yelloo.se XSS vulnerability

Vulnerable URL: http://www.yelloo.se/browse-business-cities/char:A" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2778904 Google Pagerank| 0 VIP website status:| No Check yelloo.s...

Flash Player < 13.0.0.292 / 18.0.0.160 Multiple Vulnerabilities (APSB15-11)

Binary data 8813.prm...

Flash Player < 11.7.700.275 / 13.0.0.182 Multiple Vulnerabilities (APSB14-09)

Binary data 8806.prm...

Nikto2 - Web Server Scanner

Nikto is an Open Source GPL web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks...

PT-2015-1704 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.43 and earlier Oracle MySQL Server versions 5.6.24 and earlier Description: The issue is related to errors in the code of the Server : I S subcomponent of the MySQL database management system. It allows remote...

Adobe Reader < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.14 / 11.0.11. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists in CoolType.dll due to improper validation of user-supplied input. A remote attacker can exploit thi...

The vulnerability of the MySQL database management system allows a remote attacker to cause a service failure.

The vulnerability in the MySQL database management system’s ssl23getclienthello function in the s23srvr.c file of the OpenSSL cryptographic library lies in the improper implementation of outdated protocols. Exploiting this vulnerability allows a malicious actor to cause service interruptions such...

Flash Player <= 16.0.0.235 Multiple Vulnerabilities (APSB15-01)

Binary data 8657.prm...

Seagate Confirms NAS Zero Day, Won't Patch Until May

Seagate, over the weekend, confirmed the zero-day vulnerability in its Seagate Business Storage 2-Bay NAS boxes disclosed March 1. But in the same breath, told customers exposed to the vulnerability that a patch is still two months away. “For those customers who choose to keep their networks open...

Seagate Business NAS Firmware Vulnerabilities Disclosed

Firmware running on certain Seagate network-attached storage devices that are popular with small businesses and home offices, are vulnerable to remote attacks. Researchers at Beyond Binary, a security consulting firm in Australia, on Sunday went public with their disclosure after a nearly...

Ubuntu: Security Advisory (USN-2509-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : ca-certificates update (USN-2509-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2509-1 advisory. The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20141019 package. Tenabl...

USN-2509-1: ca-certificates update

The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20141019 package...

Memory Corruption Bugs Found in VLC Media Player

There are two memory corruption vulnerabilities in some versions of the VLC open-source media player that can allow an attacker to run arbitrary code on vulnerable machines. Neither one of the vulnerabilities has been fixed by VideoLAN, the organization that maintains VLC. Security researcher...