Bomgar Remote Support - Code Execution (Metasploit)

Bomgar Remote Support - Code Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Bomgar Remote Support Unauthenticated Code Execution', 'Description' = %q This...

SUSE: Security Advisory for libxml2 (SUSE-SU-2016:1538-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2016:1538-1 Security update for libxml2

This update for libxml2 fixes the following security issues: - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c bsc963963, bsc965283, bsc981114. - CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings...

CVE-2016-4369

HPE Discovery and Dependency Mapping Inventory DDMi 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

Magento < 2.0.6 - Arbitrary Unserialize / Arbitrary Write File

arbitrary write file // Date: 18/05/206 // Exploit Author: agix discovered by NETANEL RUBIN // Vendor Homepage: https://magento.com // Version: /shipping-information // in the response check the payment method it may vary from checkmo // // If you didn't provide whereToWrite, it will execute...

[SECURITY] Fedora 22 Update: jackson-dataformat-xml-2.5.0-3.fc22

Data format extension for Jackson http://jackson.codehaus.org to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs. Support implemented on top of Stax API javax.xml.stream, by implementing core Jackson Streaming API types like JsonGenerator, JsonParser and...

[SECURITY] Fedora 23 Update: jackson-dataformat-xml-2.5.0-3.fc23

Data format extension for Jackson http://jackson.codehaus.org to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs. Support implemented on top of Stax API javax.xml.stream, by implementing core Jackson Streaming API types like JsonGenerator, JsonParser and...

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2016-700)

Multiple flaws were discovered in the Serialization and Hotspot components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions. CVE-2016-0686 , CVE-2016-0687 It was discovered that the RMI server implementation in the JMX...

OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2016-0723)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0723 advisory. 1:1.6.0.39-1.13.11.0 - Update to IcedTea 1.13.11 & OpenJDK 6 b39. - Resolves: rhbz1325432 Tenable has extracted the preceding description block...

RHEL 5 / 6 / 7 : java-1.6.0-openjdk (RHSA-2016:0723)

An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives ...

Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x, SL6.x, SL7.x i386/x86_64 (20160509)

Security Fixes : - Multiple flaws were discovered in the Serialization and Hotspot components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions. CVE-2016-0686, CVE-2016-0687 - It was discovered that the RMI server implementati...

[SECURITY] Fedora 24 Update: jackson-dataformat-xml-2.6.3-3.fc24

Data format extension for Jackson http://jackson.codehaus.org to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs. Support implemented on top of Stax API javax.xml.stream, by implementing core Jackson Streaming API types like JsonGenerator, JsonParser and...

CentOS Update for java CESA-2016:0723 centos5

Check the version of java SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882485";...

CentOS Update for java CESA-2016:0723 centos6

Check the version of java SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882488";...

RedHat Update for java-1.6.0-openjdk RHSA-2016:0723-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

java security update

CentOS Errata and Security Advisory CESA-2016:0723 An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common...

Critical: Red Hat Security Advisory: java-1.6.0-openjdk security update

An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives ...

OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization...

Mageia: Security Advisory (MGASA-2016-0149)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...