openSUSE Security Update : Mozilla Thunderbird (openSUSE-2016-848)

This update contains Mozilla Thunderbird 45.2. boo983549 It fixes security issues mostly affecting the e-mail program when used in a browser context, such as viewing a web page or HTMl formatted e-mail. The following vulnerabilities were fixed : - CVE-2016-2818, CVE-2016-2815: Memory safety bugs...

Google Chrome < 51.0.2704.103 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 51.0.2704.103. It is, therefore, affected by a vulnerability as referenced in the 201606stable-channel-update16 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cau...

[SECURITY] Fedora 22 Update: vtun-3.0.3-15.fc22

VTun provides a method for creating Virtual Tunnels over TCP/IP networks and allows one to shape, compress, and encrypt traffic in those tunnels. Supported types of tunnels are: PPP, IP, Ethernet and most other serial protocols and programs. VTun is easily and highly configurable: it can be used...

[SECURITY] Fedora 23 Update: vtun-3.0.3-15.fc23

VTun provides a method for creating Virtual Tunnels over TCP/IP networks and allows one to shape, compress, and encrypt traffic in those tunnels. Supported types of tunnels are: PPP, IP, Ethernet and most other serial protocols and programs. VTun is easily and highly configurable: it can be used...

BIKINI - Body shaping App - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BIKINI - Body shaping App published at the 'play' market has multiple vulnerabilities...

Updated thunderbird/thunderbird-l10n packages fix security vulnerability

Disables the Graphite2 font shaping library due to security issues...

MGASA-2016-0129 Updated thunderbird/thunderbird-l10n packages fix security vulnerability

Disables the Graphite2 font shaping library due to security issues...

Debian Security Advisory DSA 3523-1 (iceweasel - security update)

This update disables the Graphite font shaping library in Iceweasel, Debian OpenVAS Vulnerability Test $Id: deb3523.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3523-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbo...

DSA-3523-1 iceweasel - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3523-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Seemingly tasteless ESPCMS background injected, can actually be a lot of fun-vulnerability warning-the black bar safety net

Yesterday, the black bar safety net loophole platform exposes a ESPCMS of injection vulnerabilities, Ali cloud computing security attack and defense against a team of friends first time on the vulnerability to do an impact assessment. Did not think need to login to the backend before it can be...

Ubuntu: Security Advisory (USN-2610-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The platform/fonts/shaping/HarfBuzzShaper.cpp file of Google Chrome browser contains errors related to incorrect initialization of long fields. As a result, the bug may cause a service failure through the use of a specially crafted Unicode-formatted text message...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2610-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2610-1 advisory. Several security issues were discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker...

USN-2610-1 oxide-qt vulnerabilities

Several security issues were discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass Same Origin Policy restrictions. CVE-2015-1253, CVE-2015-1254 A use-after-free was discovered in the...

MikroTik RouterOS Cross Site Request Forgery

MikroTik RouterOS v5.0 Admin Password Change CSRF Vulnerability by @SymbianSyMoh What is MikroTik RouterOS?! MikroTik RouterOS is an operating system based on the Linux kernel, known as the MikroTik RouterOS. Installed on the company's proprietary hardware RouterBOARD series, or on standard...

RedHat Update for evolution28-pango RHSA-2011:1325-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

pango security update

CentOS Errata and Security Advisory CESA-2011:1326 Updated pango packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base scor...

zks.freedom.flaws.txt

Date: Sat, 29 May 1999 15:30:24 -0700 From: Wei Dai To: [email protected], [email protected] Subject: a practical attack against ZKS Freedom Although the ZKS Freedom AIP protocol as described in version 1.0 of the ZKS whitepaper is conceptually similar to the PipeNet protocol, there are...