Drupal 7.x < 7.52 Multiple Vulnerabilites

Binary data 9820.prm...

PHP 5.6.x < 5.6.28 / 7.0.x < 7.0.13 Multiple Vulnerabilities

Binary data 9809.prm...

Puppet Enterprise 2015.x / 2016.x < 2016.4.0 Multiple Vulnerabilities

According to its self-reported version number, the Puppet Enterprise application running on the remote host is version 2015.x or 2016.x prior to 2016.4.0. It is, therefore, affected by the following vulnerabilities : - A cross-site redirection vulnerability exists within the /auth/login script du...

Ali poly security Android application vulnerability scanner analysis: local denial of service detection detailed explanation-vulnerability warning-the black bar safety net

Ali poly security of the Android application vulnerability scanners have a detection item is a local denial of service vulnerability detection using static analysis applied motion blur test of the method to the detection, the detection results are accurate and comprehensive. This article will tal...

ManageEngine ServiceDesk Plus 9.2.0 < Build 9228 Multiple Vulnerabilities

The remote host is running ManageEngine ServiceDesk Plus version 9.2.0 prior to build 9228. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input before returning it to users. An unauthenticated, remote attacker...

Magento Community Edition 2.x < 2.0.4 Multiple Vulnerabilities

Binary data 9693.prm...

Google Chrome < 53.0.2785.113 Multiple Vulnerabilities

Binary data 9595.pasl...

Puppet Client Detection

Binary data 9672.prm...

OpenSSL 1.0.2 < 1.0.2i Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2i. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2i advisory. - Multiple memory leaks in t1lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to...

[SECURITY] Fedora 23 Update: openvas-libraries-8.0.8-2.fc23

openvas-libraries is the base library for the OpenVAS network security scanner...

Apple iOS 9.3.x < 9.3.5 Multiple Vulnerabilities

Binary data 9548.prm...

ipmi-version NSE Script

Performs IPMI Information Discovery through Channel Auth probes. Example Usage nmap -sU --script ipmi-version -p 623 Script Output PORT STATE SERVICE REASON 623/udp open|filtered unknown | ipmi-version: | Version: IPMI-2.0 | UserAuth: password, md5, md2 | PassAuth: nulluser | Level: 1.2,2.0...

openSUSE Security Update : python3 (openSUSE-2016-997) (httpoxy)

This update for python3 fixes the following issues : - apply fix for CVE-2016-1000110 - CGIHandler: sets environmental variable based on user-supplied Proxy request header fixes boo989523, CVE-2016-1000110 - update to 3.4.5 check: https://docs.python.org/3.4/whatsnew/changelog.html fixes boo98475...

OpenSSH 7.x < 7.3 Multiple Vulnerabilities

Binary data 9507.prm...

openSUSE Security Update : Chromium (openSUSE-2016-919)

Chromium was updated to 52.0.2743.82 to fix the following security issues boo989901 : - CVE-2016-1706: Sandbox escape in PPAPI - CVE-2016-1707: URL spoofing on iOS - CVE-2016-1708: Use-after-free in Extensions - CVE-2016-1709: Heap-buffer-overflow in sfntly - CVE-2016-1710: Same-origin bypass in...

Legal Robot: Subdomain takeover at api.legalrobot.com due to non-used domain in Modulus.io.

Hi, I noticed that the following domain: api.legalrobot.com was returning the following information: NO APPLICATION WAS FOUND FOR api.legalrobot.com F102881 from Modulus.io. The problem with this is that this tends to be pretty bad depending on the service you use. In this case, what I did was to...

OracleVM 3.2 : openssl (OVMSA-2016-0071)

The remote OracleVM system is missing necessary patches to address critical security updates : - To disable SSLv2 client connections create the file /etc/sysconfig/openssl-ssl-client-kill-sslv2 John Haxby orabug 21673934 - Backport openssl 08-Jan-2015 security fixes John Haxby orabug 20409893 - f...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1563-1)

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. ...

WordPress < 4.5 Multiple Vulnerabilities

Binary data 9366.prm...

Спортмастер - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Спортмастер published at the 'play' market has multiple vulnerabilities...