RedHat Update for mariadb RHSA-2014:1861-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for konversation FEDORA-2014-13702

Check the version of konversation SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868488";...

clientResponse Client Management 4.1 - Cross-Site Scripting

Exploit Title: clientResponse Client Management XSS Vulnerability Date: 14-10-2014 Exploit Author: Halil Dalabasmaz Version: v4.1 Vendor Homepage: http://codecanyon.net/item/clientresponse-responsive-php-client-management/3797780 Tested on: Chrome & Iceweasel Vulnerability Description: ===Stored...

CoinVault Ransomware Betting on Hope with Free File Decrypt

UPDATE: A prior version of this story incorrectly defined VSS as vulnerability scanning systems when in fact it refers to volume shadow copy service, which is a Windows automatic data backup and recovery mechanism. Thanks to commenter Rudy for pointing this out. The courteous CoinVault ransomware...

Atlas Systems Aeon 3.5 / 3.6 Cross Site Scripting

CVE-2014-7290 Atlas Systems Aeon XSS Cross-Site Scripting Vulnerability Exploit Title: Atlas Systems Aeon XSS Vulnerability Product: Aeon Vendor: Atlas Systems Vulnerable Versions: 3.6 3.5 Tested Version: 3.6 Advisory Publication: Nov 12, 2014 Latest Update: Nov 12, 2014 Vulnerability Type:...

Digi Online Examination System 2.0 Shell Upload

Exploit Title: Digi Online Examination System Unrestricted File Upload Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v2.0 Software Link: http://codecanyon.net/item/digi-online-examination-system-does/8610180 Software Test Link: http://s1.digitalvidhya.com/doesv2/...

Important: Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update

Updated the following packages to fix several bugs in Red Hat Satellite 6: foreman, foreman-compute, foreman-gce, foreman-libvirt, foreman-ovirt, foreman-postgresql, foreman-vmware and ruby193-rubygem-katello packages. These packages are now available in Red Hat Satellite 6. Red Hat Satellite is ...

Digi Online Examination System 2.0 - Unrestricted File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Digi Online Examination System Unrestricted File Upload Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v2.0 Software Link: http://codecanyon.net/item/digi-online-examination-system-does/8610180 Software...

SuSE 11.3 Security Update : krb5 (SAT Patch Number 9827)

This update for krb5 fixes the following issues : - When randomizing the keys for a service principal, current keys could be returned. CVE-2014-5351 - klist -s crashes when handling multiple referral entries. bnc890623 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CentOS Update for kdenetwork CESA-2014:1827 centos7

Check the version of kdenetwork SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882082";...

WordPress SupportEzzy Ticket System 1.2.5 Cross Site Scripting

Exploit Title: SupportEzzy Ticket System - WordPress Plugin Stored XSS Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.2.5 Vendor Homepage: http://codecanyon.net/item/supportezzy-ticket-system-wordpress-plugin/8908617 Software Test Link:...

Digi Online Examination System 2.0 - Unrestricted Arbitrary File Upload

Exploit Title: Digi Online Examination System Unrestricted File Upload Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v2.0 Software Link: http://codecanyon.net/item/digi-online-examination-system-does/8610180 Software Test Link: http://s1.digitalvidhya.com/doesv2/...

Piwigo 2.6.0 SQL Injection

============================================= MGC ALERT 2014-001 - Original release date: January 12, 2014 - Last revised: November 12, 2014 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...

WordPress SupportEzzy Ticket System Plugin 1.2.5 - Stored XSS

SupportEzzy Ticket System plugin is prone to the vulnerability that allows run XSS payloads and use sample payload to test. Also, URL input is not secure. Solution Filter the input field...

Microsoft Windows IME (Japanese) Privilege Elevation Vulnerability (2992719)

This host is missing a moderate security update according to Microsoft Bulletin MS14-078. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities

phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.5 Vendor Link:...

Fedora Update for xml-security FEDORA-2014-13879

Check the version of xml-security SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868460";...

PicsArt Photo Studio For Android Insecure Management Vulnerability

PicsArt Photo Studio for Android fails to properly validate SSL certificates from the server. Insecure management of login credentials in PicsArt Photo Studio for Android 1. Advisory Information Title: Insecure management of login credentials in PicsArt Photo Studio for Android Advisory ID:...

HelpDEZk 1.0.1 Unrestricted File Upload Vulnerability

HelpDEZk version 1.0.1 suffers from a remote unrestricted file upload vulnerability. Product: HelpDEZk Vendor: HelpDEZk Vulnerable Versions: 1.0.1 and probably prior Tested Version: 1.0.1 Advisory Publication: October 15, 2014 without technical details Vendor Notification: October 15, 2014 Public...

Cross-Site Scripting vulnerability in extension phpMyAdmin (phpmyadmin)

It has been discovered that the extension "phpMyAdmin" phpmyadmin is susceptible to Cross-Site Scripting. Release Date: November 5, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 4.18.0, 4.18.1, 4.18.2 and 4.18.3...