[SECURITY] Fedora 24 Update: libksba-1.3.5-1.fc24

KSBA pronounced Kasbah is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS...

SA129 : Multiple libxml2 Vulnerabilities

SUMMARY Blue Coat products that include a vulnerable version of the libxml2 library are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to execute arbitrary code and cause denial of service through memory corruption. AFFECTED PRODUCTS The following...

CVE-2016-5650

ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by using a recognized SSID value...

CVE-2016-5081

ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root password, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2016-5081

The CVE-2016-5081 entry affects ZModo ZP-NE14-S and ZP-IBH-13W devices (DVR/cameras) due to hard-coded credentials that enable root access via an always-on TELNET service. The root cause is use of undocumented hard-coded credentials and TELNET hardening bypass, allowing remote attackers to obtain...

CVE-2016-5650

CVE-2016-5650 affects ZModo ZP-NE14-S and ZP-IBH-13W cameras/DVRs. The vulnerability arises because these devices do not enforce a WPA2 configuration setting, enabling a remote attacker to induce association with an arbitrary access point by presenting a recognized SSID value. Public sources conf...

s-meetmehere.com XSS vulnerability

Open Bug Bounty ID: OBB-176194 Description| Value ---|--- Affected Website:| s-meetmehere.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

ZModo ZP-NE14-S DVR and ZP-IBH-13W Cameras Security Bypass Vulnerability

The ZModo ZP-NE14-S DVR and the ZModo ZP-IBH-13W are both digital video recorders from ZModo China. A security bypass vulnerability exists in the ZModo ZP-NE14-S DVR and ZP-IBH-13W Cameras. A remote attacker could exploit the vulnerability to gain access to the device with root privileges...

Default Backdoor Vulnerability in s-cms Website Builder System

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. There is a default backdoor vulnerability in s-cms website builder system. Allow attackers to directly obtain site or server permissions...

s-info.nu XSS vulnerability

Vulnerable URL: http://www.s-info.nu/region/default.asp?id=142";...

Fedora Update for kf5-kbookmarks FEDORA-2016-cef912e3a4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : xen-kernel -- x86: Privilege escalation in PV guests (032aa524-5854-11e6-b334-002590263bf5) (Bunker Buster)

The Xen Project reports : The PV pagetable code has fast-paths for making updates to pre-existing pagetable entries, to skip expensive re-validation in safe cases e.g. clearing only Access/Dirty bits. The bits considered safe were too broad, and not actually safe. A malicious PV guest administrat...

SuperFish Vulnerability

Lenovo Security Advisory: LEN-2015-010 Potential Impact: Man-in-the-Middle Attack Severity: High Summary: This advisory only applies to Lenovo Notebook products. ThinkPad, ThinkCentre, Lenovo Desktop, ThinkStation, ThinkServer and System x products are not impacted. SuperFish was previously...

Huawei P8 and Mate S Local Security Bypass Vulnerability

Huawei P8 and Mate S is a Huawei Huawei smartphone product. A local security bypass vulnerability exists in Huawei P8 and Mate S, which can be exploited by attackers to bypass security restrictions or launch other attacks...

Blue Coat PacketShaper S-Series Information Disclosure Vulnerability

Blue Coat PacketShaper S-Series is a scalable S-Series WAN optimization and network QoS platform from Blue Coat Systems. The platform provides bandwidth cost control, application performance optimization and network performance monitoring. An information disclosure vulnerability exists in the HTT...

Design/Logic Flaw

The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obtain sensitive credentials and other information via unspecified vectors, related to use of insecure cryptographic parameters...

CVE-2016-5774

The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obtain sensitive credentials and other information via unspecified vectors, related to use of insecure cryptographic parameters...

s-asian.cam.ac.uk XSS vulnerability

Vulnerable URL: http://www.s-asian.cam.ac.uk/wp-content/themes/csas/static/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 20.06.2017 Latest check for patch:| 20.06.2017 15:37 GMT Vulnerability type:| XSS Vulnerability...

Charm lesson OM video conferencing system /admin/do/proxy.php file target parameter local file include vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.api.request import req from pocsuite.api.poc import register from pocsuite.api.poc import Output, POCBase class TestPOCPOCBase: vulID = 'SSV-12345' vul ID version = '1' author = 'hhxx' vulDate = '2016-05-18'...

Debian DSA-3616-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2014-9904 It was discovered that the sndcompresscheckinput function used in the ALSA subsystem does not properly check for an integer overflow,...