JSShell - An Interactive Multi-User Web JS Shell

An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF framework...

Fedora 28 : subscription-manager (2018-a675aa39fc)

This is a primarily maintenance update. Please see the attached bugs for more specific details on what has improved as far as stability is concerned. There is also a larger new feature which is being released in concert with work being done in Katello / Foreman. Subscription-manager has a concept...

Fedora 28 : rsyslog (2018-749f2bae28)

rebase to 8.37.0 ---------------------- - few fixes and enhancements handling journal input - now requires librelp at least 1.2.16, adding support for setting address to bind - various other rsyslog core bugfixes and stability fixes Note that Tenable Network Security has extracted the preceding...

Servicing stack update for Windows Server 2019 and Windows 10 version 1809: December 5, 2018

None None...

Kernel update: Virtuozzo ReadyKernel patch 67.0 for Virtuozzo 7.0.4 HF3 to 7.0.7 HF3

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo kernels 3.10.0-514.16.1.vz7.30.15 7.0.4 HF3 to 3.10.0-693.21.1.vz7.48.2 7.0.7 HF3. Vulnerability id: PSBM-90024 It was discovered that a special sequence of operations involving NFS server ...

Kernel security update: Virtuozzo ReadyKernel patch 67.0 for Virtuozzo 7.0.8 and 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to Virtuozzo kernels 3.10.0-862.9.1.vz7.63.3 7.0.8 and 3.10.0-862.11.6.vz7.64.7 7.0.8 HF1. Vulnerability id: CVE-2018-14646 The Linux kernel was found to be vulnerable to a NULL pointer...

Kernel update: New kernel 2.6.32-042stab134.7; Virtuozzo 6.0 Update 12 Hotfix 34 (6.0.12-3728)

This update provides a new kernel 2.6.32-042stab134.7 for Virtuozzo 6.0. The new kernel introduces stability fixes. Vulnerability id: PSBM-89413 Host with multiple ploop devices running on a debug kernel could crash in sysfsaddrmstart on container stop. Vulnerability id: PSBM-89517 In some...

Kernel update: New kernel 2.6.32-042stab134.7 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0

This update provides a new kernel 2.6.32-042stab134.7 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0. The new kernel introduces stability fixes. Vulnerability id: PSBM-89993 Running Ubuntu containers with systemd 229-4ubuntu21.8 could result in application failures due to...

Kernel update: Virtuozzo ReadyKernel patch 66.0 for Virtuozzo 7.0.4 to 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported Virtuozzo kernels. NOTE: No more patches are planned for kernel 3.10.0-514.16.1.vz7.30.10, support for which ends with this update. Vulnerability id: PSBM-89050 cleancache: missing...

Important kernel security update: Virtuozzo ReadyKernel patch 65.0 for Virtuozzo 7.0.7 HF3 to 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to Virtuozzo kernels 3.10.0-693.21.1.vz7.48.2 7.0.7 HF3, 3.10.0-862.9.1.vz7.63.3 7.0.8, and 3.10.0-862.11.6.vz7.64.7 7.0.8 HF1. Vulnerability id: PSBM-89717 Use-after-free in the...

Kernel update: Virtuozzo ReadyKernel patch 65.0 for Virtuozzo 7.0.4 to 7.0.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo kernels 3.10.0-514.16.1.vz7.30.10 7.0.4, 3.10.0-514.16.1.vz7.30.15 7.0.4 HF3, and 3.10.0-514.26.1.vz7.33.22 7.0.5. Vulnerability id: PSBM-89323 Potential kernel crash in cbtflushcpucache...

Kernel update: Virtuozzo ReadyKernel patch 65.0 for Virtuozzo 7.0.6 to 7.0.7 HF2

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo kernels 3.10.0-693.1.1.vz7.37.30 7.0.6, 3.10.0-693.11.6.vz7.40.4 7.0.6 HF3, 3.10.0-693.17.1.vz7.43.10 7.0.7, and 3.10.0-693.21.1.vz7.46.7 7.0.7 HF2. Vulnerability id: PSBM-89323 Potential...

openSUSE Security Update : Mozilla Firefox (openSUSE-2018-1268)

This update for Mozilla Firefox to version 60.3.0esr fixes security issues and stability bugs. The following security issues were fixed MFSA 2018-27, boo1112852 : - CVE-2018-12392: Crash with nested event loops - CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript ...

Security update for Mozilla Firefox (important)

This update for Mozilla Firefox to version 60.3.0esr fixes security issues and stability bugs. The following security issues were fixed MFSA 2018-27, boo1112852: - CVE-2018-12392: Crash with nested event loops - CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript -...

SUSE-SU-2018:2649-2 Security update for java-1_7_1-ibm

This update for java-171-ibm fixes the following issues: Security issues fixed: - CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may allow an attacker to inflict a denial-of-service attack with specially crafted String data. - CVE-2018-1656: Protect against path traversa...

Kernel update: Virtuozzo ReadyKernel patch 63.0 for Virtuozzo 7.0.4 to 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to all supported Virtuozzo kernels. Vulnerability id: PSBM-88809 Potential kernel crash in ext4closepfcache...

CVE-2018-18070

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route,...

CVE-2018-18070

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route,...

Servicing stack update for Windows 10, version 1809: October 9, 2018

None None...

Belkin Wemo-Enabled Crock-Pot Remote Control

This module acts as a simple remote control for Belkin Wemo-enabled Crock-Pots by implementing a subset of the functionality provided by the Wemo App. No vulnerabilities are exploited by this Metasploit module in any way. This module requires Metasploit: https://metasploit.com/download Current...