15769 matches found
OAuth2 Client- Moderately Critical - Cross Site Request Forgery - SA-CONTRIB-2016-044
This module provides an OAuth2 client. The module does not check the validity of the state parameter, during server-side flow, before getting a token. This may allow a malicious user to feed a fake accesstoken to another user, and subsequently provide him fake data from the server. This page...
CentOS Update for qemu-guest-agent CESA-2016:1585 centos6
Check the version of qemu-guest-agent SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882539";...
Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update
An update for qemu-kvm-rhev is now available for RHEV-H and Agents for RHEL-6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
August 2016 security update release
Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security...
Debian Security Advisory DSA 3645-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5139 GiWan Go discovered a use-after-free issue in the pdfium library. CVE-2016-5140 Ke Liu discovered a use-after-free issue in the pdfium library. CVE-2016-5141 Sergey Glazunov discovered a URL spoofing issue...
iOS 9.3.4 Patches Critical Code Execution Flaw
Apple last week patched a critical iOS memory corruption vulnerability that could allow attackers to execute code on compromised devices. The flaw was found by Team Pangu, a Chinese hacker group that specializes in building iOS jailbreak tools. The vulnerability is fixed in iOS 9.3.4. “An...
Algolia: Unauthorized team members can leak information and see all API calls through /1/admin/* endpoints, even after they have been removed.
Summary ------------- Invited team members or collaborators on https://www.algolia.com/manage/applications/APPID/team can use the /1/admin/ REST endpoints to leak some information, which they should not be able to have access to. Steps to reproduce -------------- 1. Invite a new team member to yo...
About the security content of iOS 9.3.4
About the security content of iOS 9.3.4 This document describes the security content of iOS 9.3.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Pocsuite - Remote Vulnerability Testing Framework Developed By The Knownsec Security Team
Pocsuite is an open-sourced remote vulnerability testing and PoC development framework developed by the Knownsec Security Team. It serves as the cornerstone of the team. You can use Pocsuite to verify and exploit vulnerabilities or write PoC/Exp based on it. You can also integrate Pocsuite in you...
carmel.design XSS vulnerability
Vulnerable URL: http://www.carmel.design/index.php?page=team';...
Apache Continuum 1.4.2 RCE
Remote code execution vulnerability in Apache Continuum Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Red Team Tool Roundup
In many cases Red Team tools are not written because someone feels like writing a tool, or wakes up one morning thinking, “I want to write a tool today”. Red Teamers generally identify tedious tasks in their methodology and then create tools that automate these tasks for current and future...
Red Team Tool Roundup
In many cases Red Team tools are not written because someone feels like writing a tool, or wakes up one morning thinking, “I want to write a tool today”. Red Teamers generally identify tedious tasks in their methodology and then create tools that automate these tasks for current and future...
CVE-2016-5129
Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code...
3 6 0 Nirvana team to assist Apple fixed the kernel vulnerability been publicly acknowledged-bug warning-the black bar safety net
Today, Apple released a new round of security bulletins, fixes by 360Nirvan Team found that the high-risk kernel vulnerability, vulnerability number CVE-2 0 1 6-4 5 8 2, the vulnerability affects OS X 10.11.6, iOS, 9.3.3, and watchOS 2.2.2 and tvOS 9.2.2 before version the multi-platform system,...
CVE-2016-2865
The GIT Integration component in IBM Rational Team Concert RTC 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed...
Design/Logic Flaw
The GIT Integration component in IBM Rational Team Concert RTC 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed...
CVE-2016-2865
The GIT Integration component in IBM Rational Team Concert RTC 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed...
CVE-2016-2865
IBM TTC GIT Integration in RTC (5.x up to 5.0.2 iFix14; 6.x up to 6.0.1 iFix5) and Rational CLM 5.x/6.x exposes a vulnerability where a authenticated remote user can cause a malformed request to disclose sensitive information. The IBM security bulletin confirms affected products and provides reme...