October 12, 2021-KB5005541 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1909

None None...

SUSE-RU-2021:3162-1 Recommended update for SUSE Manager 4.2.2 Release Notes

This update for SUSE Manager 4.2.2 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.2 SUSE Manager is now able to manage Rocky Linux 8 clients Tech Preview: Inter-Server Sync V2 Bugs mentioned bsc1171483, bsc1173143, bsc1181223, bsc1186281, bsc118633...

Vulnerability fixed in Zoho ManageEngine ADSelfService Plus

Zoho ManageEngine has fixed a vulnerability in ADSelfService Plus. ADSelfService Plus is a self-service password management and single-sign-on solution. The vulnerability allows a malicious remotely able to bypass authentication. Zoho ManageEngine categorizes this vulnerability according to the...

CVE-2021-3041 Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation

A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges. This requires the user to have the privilege to create files in the Windows root directory...

OPENSUSE-SU-2021:0669-1 Security update for postsrsd

This update for postsrsd fixes the following issues: Update to release 1.11 boo1180251 Drop group privileges as well as user privileges Fixed: The subprocess that talks to Postfix could be caused to hang with a very long email address. CVE-2020-35573 Update to release 1.6 Fix endianness issue wit...

DRUPAL-CORE-2021-002

Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. Not all sites and users are affected, but configuration changes to prevent the exploit might be impractical and will vary between sites. Therefore, we recommend all sites update to this relea...

Citrix Endpoint Management (aka XenMobile Server) 10.12.0 Rolling Patch 7

Package name:xms10.12.0.10714.bin For: XenMobile Server 10.12.0 Deployment type: On-premises only Replaces:xms10.12.0.10102.bin, xms10.12.0.10204.bin, xms10.12.0.10324.bin, xms10.12.0.10417.bin, xms10.12.0.10539.bin, and xms10.12.0.10613.bin Date:March, 2021 Languages supported:English US Readme...

PT-2021-3472 · Minio +1 · Minio +1

Name of the Vulnerable Software and Affected Versions: MinIO versions prior to RELEASE.2021-03-04T00-53-13Z Description: The issue is related to authorization errors in MinIO, an open-source high performance object storage service compatible with Amazon S3 cloud storage. It allows a remote attack...

Citrix Endpoint Management (aka XenMobile Server) 10.9.0 Rolling Patch 5

Package name:xms10.9.0.10507.bin For: XenMobile Server 10.9.0 Deployment type: On-premises only Replaces:xms10.9.0.10405.bin, xms10.9.0.10303.bin, xms10.9.0.10204.bin, xms10.9.0.10105.bin Date:July, 2020 Languages supported:English US Readme version:1.00 Readme Revision History Version| Date|...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0339

An update of 'tcpdump' packages of Photon OS has been released...

GitLab Denial of Service Vulnerability (CNVD-2020-63396)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions 13.1,...

November 11, 2014 update for PowerPoint 2007 (KB2597972)

November 11, 2014 update for PowerPoint 2007 KB2597972 This article describes update KB2597972 for Microsoft PowerPoint 2007 that was released on November 11, 2014. This update improves the user experience in Office 2010 for when you use OLE objects in an Office 2010 application. How to download...

You can't open the "Devices" menu in PC Settings in Windows 8.1 or Windows Server 2012 R2

You can't open the "Devices" menu in PC Settings in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs when you try to open the Devices menu in PC Settings in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. An update is available to fix this issue. Before yo...

Updated e2fsprogs packages fix security vulnerability

Updated e2fsprogs packages fix security vulnerability: A code execution vulnerability in the directory rehashing functionality CVE-2019-5188. For other fixes in this update, see the referenced release info...

Google Chrome < 70.0.3538.67 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 70.0.3538.67. It is, therefore, affected by multiple vulnerabilities as referenced in the 201810stable-channel-update-for-desktop advisory. - Use after free in HTMLImportsController in Blink in Google Chrome prior to...

Kados R10 GreenBee - 'release_id' SQL Injection

Exploit Title: Kados R10 GreenBee - 'releaseid' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.kados.info/ Software Link: https://sourceforge.net/projects/kados/ Version: R10 GreenBee Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

SUSE-SU-2018:2641-1 Security update for enigmail

This update for enigmail to 2.0.8 fixes the following issues: The enigmail 2.0.8 release addresses a security issue and solves a few regression bugs. A security issue has been fixed that allows an attacker to prepare a plain, unauthenticated HTML message in a way that it looks like it's signed...

Solaris 10 (x86) : 125438-22

Oracle iPlanet Web Server 7.0.12 Solarisx86: Update Release patch. Date this patch was last updated by Sun : Aug/26/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

UPDATE: Kali Linux 2017.2 Release

PenTestIT RSS Feed About five months ago, I wrote about Kali Linux 2017.1. We now have an update - Kali Linux 2017.2, which is a roll-up of all updates since the last release. In addition to all of the standard security and package updates that are submitted via Debian Testing, this release also...

PT-2017-17351

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.1.8 Roundcube versions 1.2.x prior to 1.2.4 Description The issue allows for a cross-site scripting attack via a crafted Cascading Style Sheets CSS token sequence within an SVG element in the rcube utils.php file...