ManageEngine EventLog Analyzer 4.0 < 10 - Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Exploit Title: ManageEngine Eventlog Analyzer Privilege Escalation Exploit Author: @GraphX Vendor Homepage:http://www.manageengine.com Version: 4.0 - 10 1. Description: The manageengine eventlog analyzer fails to properly verify user privileges when...

[SECURITY] [DLA 405-1] tiff security update

Package : tiff Version : 3.9.4-5+squeeze14 CVE ID : CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 CVE-2015-8784 Debian Bug : Several security flaws have been found and solved in libtiff, a library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads a...

V3n0M-Scanner - Popular SQLi and Pentesting Scanner

V3n0M runs on Python3 Live Project - Readding old features back in and improved for Python3 v3n0m is a free and open source scanner. Evolved from baltazar's scanner, it has adapted several new features that improve fuctionality and usability. It is mostly experimental software. This program is fo...

About the security content of OS X El Capitan 10.11.3 and Security Update 2016-001 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

About the security content of Safari 9.0.3

About the security content of Safari 9.0.3 This document describes the security content of Safari 9.0.3. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. T...

Bitcoin Creator 'Satoshi Nakamoto' Unmasked! An Australian Man 'Craig Wright' identified...

Breaking Update: Police Raid alleged Bitcoin Creator Craig Wright's Home in Sydney. Yes, Satoshi Nakamoto, the mysterious creator of the Bitcoin digital cryptocurrency has possibly been identified as an Australian entrepreneur, according to investigations independently done by Wired and Gizmodo...

CVE-2015-7385

Cross-site scripting XSS vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings."...

Cross site scripting

Cross-site scripting XSS vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings."...

CVE-2015-7385

Open-Xchange OX Guard up to version 2.0.0-rev11 is affected by a Cross-site scripting (XSS) flaw in the Guard PGP Settings. The uid field in a PGP public key can carry arbitrary user-id content that may be rendered in the affected UI, enabling remote attackers to inject JavaScript/HTML. Public ke...

CVE-2015-7385

Cross-site scripting XSS vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings."...

Open-Xchange Guard 2.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Product: Open-Xchange Guard Vendor: Open-Xchange GmbH Internal reference: 41466 Bug ID Vulnerability type: Cross-Site-Scripting CWE-80 Vulnerable version: 2.0 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by...

[SECURITY] [DLA 340-1] krb5 security update

Package : krb5 Version : 1.8.3+dfsg-4squeeze10 CVE ID : CVE-2015-2695 CVE-2015-2697 Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-2695 It was discovered that...

CVE-2007-3635

Multiple unspecified vulnerabilities in the G/PGP GPG Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634...

CVE-2007-3636

Multiple unspecified vulnerabilities in the G/PGP GPG Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via unspecified vectors. NOTE: this information is based upon a vague pre-advisory from a reliable researcher...

APPLE-SA-2015-10-21-5 iTunes 12.3.1

APPLE-SA-2015-10-21-5 iTunes 12.3.1 iTunes 12.3.1 is now available and addresses the following: iTunes Available for: Windows 7 and later Impact: A man-in-the-middle attack while browsing the iTunes Store via iTunes may result in unexpected application termination or arbitrary code execution...

APPLE-SA-2015-10-21-7 Xcode 7.1

APPLE-SA-2015-10-21-7 Xcode 7.1 Xcode 7.1 is now available and addresses the following: Swift Available for: OS X Yosemite v10.10.5 or later Impact: Swift programs performing certain type conversions may receive unexpected values Description: A type conversion issue existed that could lead to...

APPLE-SA-2015-09-30-01 iOS 9.0.2

APPLE-SA-2015-09-30-01 iOS 9.0.2 iOS 9.0.2 is now available and addresses the following: Lock Screen Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A person with physical access to an iOS device may be able to access photos and contacts from the...

Ashley Madison Hackers (with another 300GB Dump) – Wait, Cheaters! We haven't Yet Done

Over a month ago, a group of hackers breached the popular cheater's dating service Ashley Madison and its parent company Avid Life Media, affecting tens of Millions site customers private life and also dump the website's source code onto the dark web. The hackers behind the Ashley Madison hack, w...

sysPass 1.0.9 - SQL Injection

sysPass 1.0.9 - SQL Injection -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-031 Product: sysPass Vendor: http://cygnux.org/ Affected Versions: 1.0.9 and below Tested Versions: 1.0.9 Vulnerability Type: SQL Injection CWE-89 Risk Level: High Solution Status: Fixed Vendor...

Ubuntu: Security Advisory (USN-2607-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...