RHEL 7 : kernel (RHSA-2015:2552)

Updated kernel packages that fix two security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

DEBIAN-CVE-2015-1794

The ssl3getkeyexchange function in ssl/s3clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service segmentation fault via a zero p value in an anonymous Diffie-Hellman DH ServerKeyExchange message...

OpenSSL ServerKeyExchange Message Handling Remote Denial of Service Vulnerability

OpenSSL is an open source implementation of SSL for strong encryption of network communications. A security vulnerability exists in OpenSSL, where a remote attacker submitting a special anonymous DH encryption suite of ServerKeyExchange messages can crash the target service if the p-value is set ...

p++BBS vulnerable to cross-site scripting

Overview p++BBS provided by Let's PHP! contains a stored cross-site scripting vulnerability CWE-79. Koki Takahashi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be executed on the...

JVN#72891124: p++BBS vulnerable to cross-site scripting

p++BBS provided by Let's PHP! contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Apply an Update Update to the latest version according to the information provided by the developer. Products Affected p++BBS...

tools.cisco.com Cross Site Scripting

Exploit Title: Cisco.com sub-domain Reflected XSS RXSS Date: 31/10/2015 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.cisco.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: cisco.com sub-domains Cisco description :...

RHEL 7 : qemu-kvm (RHSA-2015:1943)

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...

Moderate: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

Multiple ZyXEL Router Credential Management Vulnerabilities

ZyXEL NBG-418N, PMG5318-B20A and P-660HW-T1 are all products of ZyXEL Technology Corporation.NBG-418N and P-660HW-T1 are wireless broadband routers; PMG5318-B20A is a wireless switch product. A security vulnerability exists in multiple ZyXEL routers. A remote attacker could exploit the...

IntelBras WRN 340 Unauthenticated Remote DNS Changer

!/usr/bin/perl IntelBras WRN 340 ADSL Modem-Router - Unauthenticated Remote DNS Change Exploit Discovered by: Gabriel P. Lipski - gpDOTlipskiATgmailDOTcom Brazil, sept. 2015. AVISO: Este codigo foi feito apenas para fins educacionais. NAO USE SEM A PERMISSAO DO DONO DA REDE-ALVO. Use por sua cont...

nss-softokn security update

3.14.3-23 - Pick up upstream freebl patch for CVE-2015-2730 - Check for P == Q or P ==-Q before adding P and Q...

CVE-2001-1594

GE Healthcare eNTEGRA P&R has a password of 1 entegra for the entegra user, 2 passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, 3 0 for the entegra user of the Codonics printer FTP service, 4 eNTEGRA for the eNTEGRA P&R user account, 5 insite for the WinVNC Login, and...

CVE-2001-1594

CVE-2001-1594 relates to GE Healthcare eNTEGRA P&R and is mapped to default/hard-coded credentials across multiple GE devices (eNTEGRA 2.0/2.5 Workstation, and related imaging products). The connected sources confirm that the vulnerability enables authentication bypass by using known passwords (e...

CVE-2001-1594

GE Healthcare eNTEGRA P&R has a password of 1 entegra for the entegra user, 2 passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, 3 0 for the entegra user of the Codonics printer FTP service, 4 eNTEGRA for the eNTEGRA P&R user account, 5 insite for the WinVNC Login, and...

ESA-2015-106: EMC Unified Infrastructure Manager/Provisioning (UIM/P) Authentication Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-106: EMC Unified Infrastructure Manager/Provisioning UIM/P Authentication Bypass Vulnerability EMC Identifier: ESA-2015-106 CVE Identifier: CVE-2015-0546 Severity Rating: CVSS v2 Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C Affected products: ...

CVE-2015-0546

EMC Unified Infrastructure Manager/Provisioning UIM/P 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name...

CVE-2015-0546

EMC Unified Infrastructure Manager/Provisioning UIM/P 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name...

Debian DSA-3259-1 : qemu - security update (Venom)

Several vulnerabilities were discovered in the qemu virtualisation solution : - CVE-2014-9718 It was discovered that the IDE controller emulation is susceptible to denial of service. - CVE-2015-1779 Daniel P. Berrange discovered a denial of service vulnerability in the VNC web socket decoder. -...

ZYXEL P-660HN-T1H_IPv6 Denial Of Service Exploit

ZYXEL P-660HN-T1HIPv6 remote configuration editor / web service denial of service exploit. | | | ' | | | | | \r\n" ." | | | | | | | | | | | | | \r\n" ." / || || ||/|| || \r\n" ." \r\n" ." \r\n"; print $banner; function Post$packet,$host try $curl = curlinit; curlsetopt$curl, CURLOPTURL, $host;...