VirIT Explorer Lite & Pro 8.1.68 - Privilege Escalation

Exploit for windows platform in category local exploits / Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation System/Arbitrary Code Execution Exploit Author: Paolo Stagno - email protected Vendor Homepage: http://www.tgsoft.it Version: VirIT Explorer Lite & Pro v.8.1.68 Test...

VirIT Explorer Lite Pro 8.1.68 - Local Privilege Escalation

VirIT Explorer Lite Pro 8.1.68 - Local Privilege Escalation / Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation System/Arbitrary Code Execution Exploit Author: Paolo Stagno - [email protected] Vendor Homepage: http://www.tgsoft.it Version: VirIT Explorer Lite & Pro...

VirIT Explorer Lite & Pro 8.1.68 - Local Privilege Escalation

/ Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation System/Arbitrary Code Execution Exploit Author: Paolo Stagno - [email protected] Vendor Homepage: http://www.tgsoft.it Version: VirIT Explorer Lite & Pro v.8.1.68 Tested on: Windows 7 CVE: TBD CVSS v2: 6.8...

Unbreakable Enterprise kernel security update

kernel-uek 4.1.12-37.3.1 - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. David Howells Orabug: 23279022 CVE-2016-0758 - uek-rpm: ol6: revert DRM for experimental or OL6-incompatible drivers Todd Vierling Orabug: 23270829 - unix: properly account for FDs passed over un...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3554)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3554 advisory. kernel-uek 4.1.12-37.2.2 - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222731 CVE-2015-8767 Tenable has...

OracleVM 3.4 : kernel-uek (OVMSA-2016-0047)

The remote OracleVM system is missing necessary patches to address critical security updates : - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222731 CVE-2015-8767 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3551)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3551 advisory. - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222753 CVE-2015-8767 Tenable has extracted the preceding...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3553)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3553 advisory. kernel-uek 2.6.32-400.37.16uek - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222781 CVE-2015-8767 Tenabl...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3552)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3552 advisory. 2.6.39-400.278.2 - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222773 CVE-2015-8767 Tenable has extracte...

Unbreakable Enterprise kernel security update

kernel-uek 2.6.32-400.37.16uek - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222781 CVE-2015-8767...

Unbreakable Enterprise kernel security update

kernel-uek 4.1.12-37.2.2 - sctp: Prevent soft lockup when sctpaccept is called during a timeout event Karl Heiss Orabug: 23222731 CVE-2015-8767...

CVE-2016-3442

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Portal...

Soft Pixel Dungeon - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Soft Pixel Dungeon published at the 'play' market has multiple vulnerabilities...

WordPress Best Web Soft Captcha Plugin 4.1.5 - Multiple Vulnerabilities

There are multiple vulnerabilities in this plugin, such as XSS and CSRF. Because of that, an attacker can send admin a URL crafted for the example, http://wwww.victim.com/wp-admin/admin.php?page=captcha.php&action=whitelist&s=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E or send a form, that will...

WordPress Best Web Soft Captcha 4.1.5 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: BWS Captcha Multiple Vulnerabilities Discovery Date:12.03.2015 Public Disclosure Date:03.10.2016 Exploit Author: Colette Chamberland Contact: email protected Vendor Homepage: http://bestwebsoft.com/ Software Link:...

Fedora 22 : kernel-4.1.10-200.fc22 (2015-dcc260f2f2)

kernel-4.1.10-200.fc22 - Linxu v4.1.10 - Add patch to fix soft lockups in network stack rhbz 1266691 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 23 : shellinabox-2.19-1.fc23 (2015-1c773e8702)

Added support for middle-click paste Improved iOS support New logic to enable soft keyboard icon Disable HTTPS fallback using the URL /plain. Consequently disables automatic upgrades from HTTP to HTTPS CVE-2015-8400 Note that Tenable Network Security has extracted the preceding description block...

Crouzet em4 soft 1.1.04 / M3 soft 3.1.2.0 Insecure File Permissions

Crouzet em4 soft 1.1.04 and M3 soft 3.1.2.0 Insecure File Permissions Vendor: Crouzet Automatismes SAS Product web page: http://www.crouzet-automation.com Affected version: em4 soft 1.1.04 and 1.1.03.01 M3 soft 3.1.2.0 Summary: em4 is more than just a nano-PLC. It is a leading edge device...

Crouzet em4 soft 1.1.04 M3 soft 3.1.2.0 - Insecure File Permissions

Crouzet em4 soft 1.1.04 M3 soft 3.1.2.0 - Insecure File Permissions Crouzet em4 soft 1.1.04 and M3 soft 3.1.2.0 Insecure File Permissions Vendor: Crouzet Automatismes SAS Product web page: http://www.crouzet-automation.com Affected version: em4 soft 1.1.04 and 1.1.03.01 M3 soft 3.1.2.0 Summary:...

Crouzet em4 soft 1.1.04 - '.pm4' Integer Division By Zero

Exploit for windows platform in category dos / poc Crouzet em4 soft 1.1.04 Integer Division By Zero Vendor: Crouzet Automatismes SAS Product web page: http://www.crouzet-automation.com Affected version: 1.1.04 and 1.1.03.01 Summary: em4 is more than just a nano-PLC. It is a leading edge device...