Web Application Scanning Consolidation / Info Reporting

The script consolidates and reports various information for web application formerly called SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH SPDX-FileCopyrightText: New / improved code since 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

FireEye Appliance Unauthorized File Disclosure Vulnerability

Exploit for php platform in category web applications Just one of many handfuls of FireEye / Mandiant 0day. Been sitting on this for more than 18 months with no fix from those security "experts" at FireEye. Pretty sure Mandiant staff coded this and other bugs into the products. Even more sad,...

GE Healthcare Centricity DMS Ad Hoc Reporting Trust Management Vulnerability

GE Healthcare Centricity DMS is a General Electric GE cardiology clinical education data management system for the healthcare industry. A security vulnerability exists in the Ad Hoc Reporting feature of GE Healthcare Centricity DMS version 4.2, which originates from an Administrator user using...

Hardcoded credentials

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a...

CVE-2013-7405

The CVE-2013-7405 entry concerns GE Healthcare Centricity DMS 4.2, specifically the Ad Hoc Reporting feature where the Administrator password is set to Never!Mind. The core detail available across connected sources is that this password is problematic and that an attacker could potentially take c...

CVE-2013-7405

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a...

[SECURITY] Fedora 22 Update: haproxy-1.5.14-1.fc22

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

Oracle Critical Patch Update Advisory - July 2015

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

abrt: Various race-conditions and symlink issues found in abrt

It was found that ABRT was vulnerable to multiple race condition and symbolic link flaws. A local attacker could use either of these flaws to potentially escalate their privileges on the system...

CVE-2015-2742

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream...

CVE-2015-2742

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream...

Information disclosure

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream...

[SECURITY] Fedora 21 Update: libreport-2.3.0-8.fc21

Libraries providing API for reporting different problems in applications to different bug targets like Bugzilla, ftp, trac, etc...

ABRT Local Information Disclosure Vulnerability

ABRT is a set of automated bug reporting tools. ABRT suffers from a local information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Multiple Local Information Disclosure Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT has multiple local information disclosure vulnerabilities. A local attacker could exploit the vulnerabilities to obtain sensitive information...

Multiple Directory Traversal Vulnerability in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple directory traversal vulnerabilities. A local attacker can exploit this vulnerability by sending a request with the directory traversal character '...' with the directory traversal character '...'...

Multiple Local Elevation of Privilege Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple local elevation of privilege vulnerabilities. A local attacker can exploit this vulnerability to gain elevated privileges...

Multiple Local Security Bypass Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple local security bypass vulnerabilities. A local attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

ABRT Local Elevation of Privilege Vulnerability

ABRT is a set of automated bug reporting tools. ABRT suffers from a local boost elevation vulnerability. A local attacker can exploit this vulnerability to gain root privileges...

abrt: Various race-conditions and symlink issues found in abrt

It was found that ABRT was vulnerable to multiple race condition and symbolic link flaws. A local attacker could use either of these flaws to potentially escalate their privileges on the system...