Threat Outbreak Alert RuleID24225: Email Messages Distributing Malicious Software on August 11, 2016

Medium Alert ID: 48437 First Published: 2016 August 11 13:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24225 may contain the following files: Name |...

Dell OpenManage Server Administrator 8.2 - Authenticated Directory Traversal

Exploit for windows platform in category web applications Exploit Title: Dell OpenManage Server Administrator 8.2 Authenticated Directory Traversal Date: February 22, 2016 Exploit Author: hantwister Vendor Homepage: http://www.dell.com/ Software Link:...

Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal

Dell OpenManage Server Administrator 8.2 - Authenticated Directory Traversal Exploit Title: Dell OpenManage Server Administrator 8.2 Authenticated Directory Traversal Date: February 22, 2016 Exploit Author: hantwister Vendor Homepage: http://www.dell.com/ Software Link:...

PT-2017-53: Weak Password in Rockwell Automation Micrologix 1100 and 1400 PLC

The specialists of the Positive Research center have detected weak passwords in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in programmable-logic controllers, due to usage of numeric passwords with a small maximum character size for the password, allows attackers to bypass...

Zend Framework 2.4.2 - PHP FPM XML eXternal Entity Injection

============================================= - Release date: 12.08.2015 - Discovered by: Dawid Golunski - Severity: High - CVE-ID: CVE-2015-5161 ============================================= I. VULNERABILITY ------------------------- Zend Framework = 2.4.2 XML eXternal Entity Injection XXE on PH...

iPass Mobile Client 2.4.2.15122 Privilege Escalation Vulnerability

iPass Mobile Client version 2.4.2.15122 suffers from a local privilege escalation vulnerability. Title: iPass Mobile Client service local privilege escalation Product: iPass Mobile Client Affected versions: iPass Mobile Client 2.4.2.15122 Newer version might be also affected Impact: medium Remote...

[SECURITY] Fedora 20 Update: owasp-esapi-java-2.1.0-2.fc20

OWASP ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library that makes it easier for programme rs to write lower-risk applications. The ESAPI for Java library is designed to make it easier for programmers to retrofit security into existing...

ESA-2014-074: EMC RecoverPoint Appliance Security Control Bypass Vulnerability

ESA-2014-074.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-074: EMC RecoverPoint Appliance Security Control Bypass Vulnerability EMC Identifier: ESA-2014-074 CVE Identifier: CVE-2014-2519 Severity Rating: CVSS v2 Base Score: 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P Affected products: • EMC...

[SECURITY] Fedora 20 Update: lynis-1.5.6-1.fc20

Lynis is an auditing and hardening tool for Unix/Linux and you might even c all it a compliance tool. It scans the system and installed software. Then it performs many individual security control checks. It determines the hardeni ng state of the machine, detects security issues and provides...

Mozilla Thunderbird 17.0.6 - Input Validation Filter Bypass

Mozilla Thunderbird 17.0.6 - Input Validation Filter Bypass Document Title: =============== Mozilla Bug Bounty 5 - WireTap Remote Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=953 Mozilla Bug Tracking ID: 875818 Video:...

[SECURITY] Fedora 18 Update: lynis-1.3.6-1.fc18

Lynis is an auditing and hardening tool for Unix/Linux and you might even c all it a compliance tool. It scans the system and installed software. Then it performs many individual security control checks. It determines the hardeni ng state of the machine, detects security issues and provides...

Check Point ZoneAlarm Detection and Status

Check Point ZoneAlarm, a commercial antivirus package for Windows, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable Network Security, Inc. include"compat.inc"; ...

Imperva SecureSphere Operations Manager Command Execution

Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.2013...

Mandrake Linux Security Advisory : kernel (MDKSA-2000:012)

POSIX 'Capabilities' have recently been implemented in the Linux kernel. These 'Capabilities' are an additional form of privilege control to enable more specific control over what privileged processes can do. Capabilities are implemented as three fairly large bitfields, which each bit representin...

Trend Micro ServerProtect Detection and Status (credentialed check)

Trend Micro ServerProtect for Windows, a commercial antivirus and antimalware software package for Windows, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 7763)

This update resolves - a universal cross-site scripting issue that could be used to take actions on a user's behalf on any website or webmail provider if the user visits a malicious website. CVE-2011-2444 Note: There are reports that this issue is being exploited in the wild in active targeted...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 5184)

This update resolves - a universal cross-site scripting issue that could be used to take actions on a user's behalf on any website or webmail provider if the user visits a malicious website. CVE-2011-2444 Note: There are reports that this issue is being exploited in the wild in active targeted...

ESA-2011-032: EMC Documentum eRoom arbitrary file upload vulnerability.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-032: EMC Documentum eRoom arbitrary file upload vulnerability. EMC Identifier: ESA-2011-032 CVE Identifier: CVE-2011-2739 Severity Rating: CVSS v2 Base Score: 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C Affected products: EMC SW: EMC Documentum eRoom 7.3...

Mac OS X XProtect Installed

There is a problem with the installation of the Apple XProtect application on the remote Mac OS X host - either updates are not enabled / running or its definitions are out of date. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56568; scriptversion"1.57";...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 53e531a7-e559-11e0-b481-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID 53e531a7-e559-11e0-b481-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...