CVE-2015-1834 - Path Traversal Vulnerability | Cloud Foundry

CVE-2015-1834 – Path Traversal Vulnerability Moderate Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v208 Description A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller. Path traversal is the ‘outbreak’ of a given director...

NetUSB Driver Flaw Exposes Millions of Routers to Hacking

A simple but shockingly dangerous vulnerability has been uncovered in the NetUSB component, putting Millions of modern routers and other embedded devices across the globe at risk of being compromised by hackers. The security vulnerability, assigned CVE-2015-3036, is a remotely exploitable kernel...

KCodes NetUSB Vulnerability Details Surface

The Department of Homeland Security-sponsored CERT at Carnegie Mellon University today issued an alert warning of a serious vulnerability in KCode NetUSB, which is integrated into products sold by a number of networking vendors. KCodes NetUSB is a Linux kernel module that enables several users on...

KCodes NetUSB kernel driver is vulnerable to buffer overflow

Overview KCodes NetUSB is vulnerable to a buffer overflow via the network that may result in a denial of service or code execution. Description KCodes NetUSB is a Linux kernel module that provides USB over IP. It is used to provide USB device sharing on a home user network.CWE-120: Buffer Copy...

XSS, CSRF Vulnerabilities identitified in WSO2 Identity Server

A handful of vulnerabilities have been identified in WSO2 Identity Server that could lead to takeover, firewall bypass, and potentially expose subsequent internal servers to further attacks. The open source server software helps developers manage identities and keep track of web apps, services an...

PHPMoAdmin 1.1.2 Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'PHPMoAdmin 1.1.2 Remote Code Execution', 'Description' = %q This module exploits an arbitrary PHP command execution vulnerability du...

SEC Consult SA-20150122-0 :: Multiple critical vulnerabilities in Symantec Data Center Security: Server Advanced (SDCS:SA) & SCSP

SEC Consult Vulnerability Lab Security Advisory 20150122-0 ======================================================================= title: Multiple critical vulnerabilities products: Symantec Data Center Security: Server Advanced SDCS:SA Symantec Critical System Protection SCSP vulnerable version:...

CVE-2014-6565

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC...

Code injection

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC...

CVE-2014-6565

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC...

CVE-2014-6565

CVE-2014-6565 relates to Oracle JD Edwards EnterpriseOne Tools component (JD Edwards Products 9.1.5). Connected sources indicate a vulnerability in the Portal SEC area of the Tools component that could allow remote attackers to affect confidentiality, integrity, and availability. Practical impact...

PT-2015-3874

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards Products version 9.1.5 Description The issue affects confidentiality, integrity, and availability. It can be exploited remotely via vectors related to Portal SEC in the JD Edwards EnterpriseOne Tools component. Recommendation...

CVE-2014-6565: Undefined Security Weakness

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC...

PT-2015-4195

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 krb5 versions 1.11.x through 1.11.5 MIT Kerberos 5 krb5 versions 1.12.x through 1.12.2 MIT Kerberos 5 krb5 versions 1.13.x prior to 1.13.1 Description The issue allows remote attackers to obtain sensitive information from proces...

Ansible Tower 2.0.2 XSS / Privilege Escalation / Authentication Missing

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation & XSS & Missing Authentication product: Ansible Tower vulnerable version: =2.0.5 impact: high homepage: http://www.ansible.com/tower found: 2014-10-1...

Missing Two-Factor Authentication Led to JPMorgan Breach

The biggest U.S. banking breach of all time came down to the smallest of details. The New York Times, citing sources close to the ongoing investigation of the JPMorgan data breach, said hackers found a server unprotected by two-factor authentication to break in using a stolen user name and passwo...

GParted 0.14.1 - OS Command Execution Vulnerability

Exploit for linux platform in category local exploits title: OS Command Execution product: GParted - Gnome Partition Editor vulnerable version: =0.15.0, =0.14.1 with fix for CVE-2014-7208 applied CVE number: CVE-2014-7208 impact: medium homepage: http://gparted.org/ found: 2014-07 by: W. Ettlinge...

PT-2014-4223

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions prior to 3.16.2.4 Mozilla Network Security Services NSS versions 3.17.x prior to 3.17.3 Description The issue arises from the definite length decoder function in lib/util/quickder.c, which fails t...

Code injection

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98 allows local users to affect confidentiality, integrity, and availability via vectors related to Installation SEC...

CVE-2014-6516

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98 allows local users to affect confidentiality, integrity, and availability via vectors related to Installation SEC...