Atlassian JIRA 6.4.x < 6.4.11 Multiple Vulnerabilities

Binary data 9918.prm...

AlAhliMobile - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AlAhliMobile published at the 'play' market has multiple vulnerabilities...

Fedora 25 : 2:qemu (2017-b953d4d3a4)

CVE-2016-6836: vmxnet: Information leakage in vmxnet3completepacket bz 1366370 - CVE-2016-7909: pcnet: Infinite loop in pcnetrdraaddr bz 1381196 - CVE-2016-7994: virtio-gpu: memory leak in resourcecreate2d bz 1382667 - CVE-2016-8577: 9pfs: host memory leakage in v9fsread bz 1383286 -...

OracleVM 3.3 / 3.4 : sudo (OVMSA-2016-0170)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update noexec syscall blacklist - Fixes CVE-2016-7032, CVE-2016-7076 Resolves: rhbz1391937 - RHEL-6.8 erratum - fixed a bug causing that non-root users can list privileges of other users Resolves:...

PHP 5.6.x < 5.6.28 / 7.0.x < 7.0.13 Multiple Vulnerabilities

Binary data 9809.prm...

Drupal 7.x < 7.52 Multiple Vulnerabilites

Binary data 9820.prm...

Puppet Enterprise 2015.x / 2016.x < 2016.4.0 Multiple Vulnerabilities

According to its self-reported version number, the Puppet Enterprise application running on the remote host is version 2015.x or 2016.x prior to 2016.4.0. It is, therefore, affected by the following vulnerabilities : - A cross-site redirection vulnerability exists within the /auth/login script du...

Ali poly security Android application vulnerability scanner analysis: local denial of service detection detailed explanation-vulnerability warning-the black bar safety net

Ali poly security of the Android application vulnerability scanners have a detection item is a local denial of service vulnerability detection using static analysis applied motion blur test of the method to the detection, the detection results are accurate and comprehensive. This article will tal...

ManageEngine ServiceDesk Plus 9.2.0 < Build 9228 Multiple Vulnerabilities

The remote host is running ManageEngine ServiceDesk Plus version 9.2.0 prior to build 9228. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input before returning it to users. An unauthenticated, remote attacker...

Google Chrome < 53.0.2785.113 Multiple Vulnerabilities

Binary data 9595.pasl...

Magento Community Edition 2.x < 2.0.4 Multiple Vulnerabilities

Binary data 9693.prm...

Puppet Client Detection

Binary data 9672.prm...

OpenSSL 1.0.2 < 1.0.2i Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2i. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2i advisory. - Multiple memory leaks in t1lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to...

[SECURITY] Fedora 23 Update: openvas-libraries-8.0.8-2.fc23

openvas-libraries is the base library for the OpenVAS network security scanner...

Apple iOS 9.3.x < 9.3.5 Multiple Vulnerabilities

Binary data 9548.prm...

ipmi-version NSE Script

Performs IPMI Information Discovery through Channel Auth probes. Example Usage nmap -sU --script ipmi-version -p 623 Script Output PORT STATE SERVICE REASON 623/udp open|filtered unknown | ipmi-version: | Version: IPMI-2.0 | UserAuth: password, md5, md2 | PassAuth: nulluser | Level: 1.2,2.0...

openSUSE Security Update : python3 (openSUSE-2016-997) (httpoxy)

This update for python3 fixes the following issues : - apply fix for CVE-2016-1000110 - CGIHandler: sets environmental variable based on user-supplied Proxy request header fixes boo989523, CVE-2016-1000110 - update to 3.4.5 check: https://docs.python.org/3.4/whatsnew/changelog.html fixes boo98475...

OpenSSH 7.x < 7.3 Multiple Vulnerabilities

Binary data 9507.prm...

openSUSE Security Update : Chromium (openSUSE-2016-919)

Chromium was updated to 52.0.2743.82 to fix the following security issues boo989901 : - CVE-2016-1706: Sandbox escape in PPAPI - CVE-2016-1707: URL spoofing on iOS - CVE-2016-1708: Use-after-free in Extensions - CVE-2016-1709: Heap-buffer-overflow in sfntly - CVE-2016-1710: Same-origin bypass in...

Legal Robot: Subdomain takeover at api.legalrobot.com due to non-used domain in Modulus.io.

Hi, I noticed that the following domain: api.legalrobot.com was returning the following information: NO APPLICATION WAS FOUND FOR api.legalrobot.com F102881 from Modulus.io. The problem with this is that this tends to be pretty bad depending on the service you use. In this case, what I did was to...