[SECURITY] Fedora 23 Update: pdfbox-1.8.8-6.fc23

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

The vulnerability of the GNU Core Utilities system utilities allows a perpetrator to trigger a service failure.

The vulnerability of the sort utility within the GNU Core Utilities suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause a service failure by entering a long string as an argument for the sort function when using additional parameter...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the LDAP-utils package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Pidgin instant messaging system allows a remote attacker to trigger a service denial.

The Pidgin software contains a vulnerability in its component designed to work with the STUN protocol. Exploiting this vulnerability allows a remote attacker to induce a service denial by manipulating the software sockets...

Python Exploit Development GDB Assistance: Peda

Python Exploit Development GDB Assistance PEDA is a Python GDB script with many handy commands to help speed up exploit development process on Linux/Unix. It is also a framework for writing custom interactive Python GDB commands. PEDA v1.1 Released Requirements PEDA 1.0 is only support Linux GDB...

key.com XSS vulnerability

Vulnerable URL: https://www.key.com/corporate/industry-expertise/energy-utilities-capital-raising.jsp?sqkl=asd--' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5546 VIP website status:| Yes Check key.com SSL...

[SECURITY] Fedora 23 Update: dosfstools-3.0.28-3.fc23

The dosfstools package includes the mkdosfs and dosfsck utilities, which respectively make and check MS-DOS FAT filesystems on hard drives or on floppies...

Updated imagemagick/ruby-rmagic packages fix security vulnerability

It was discovered that ImageMagick did not properly sanitize certain input before passing it to the delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities,...

Tuto4PC Utilities Silently Install 12M Backdoors, Cisco

Security experts are warning PC users of scareware computer utilities published by the French firm Tuto4PC that secretly bundle adware and spyware. Cisco’s Talos security research team said several of the company’s utilities, including OneSoftPerDay and System Healer, contain Trojans that exhibit...

[SECURITY] Fedora 24 Update: binutils-2.26-18.fc24

Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...

IP Tools: Network utilities - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application IP Tools: Network utilities published at the 'play' market has multiple vulnerabilities...

PentestBox 2.0 - Portable Penetration Testing Distribution for Windows Environments

PentestBox provides all security tools as a software package, eliminating requirement of Virtual machines or dualboot environments on Windows Operating System. It is created because more than 50% of penetration testing distribution users uses windows. Source So it provides an efficient platform f...

Solaris 10 (sparc) : 152264-01 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Utilities. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via RPC to compromise Solaris. Successful attacks of this...

Solaris 10 (x86) : 152265-01 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Utilities. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via RPC to compromise Solaris. Successful attacks of this...

[SECURITY] Fedora 23 Update: 389-ds-base-1.3.4.8-1.fc23

389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...

Five-Year 'Dust Storm' APT Campaign Seen Targeting Japanese Critical Infrastructure

A five-year campaign primarily focused on extracting sensitive information from Japanese oil, gas, and electric utilities was outlined by researchers on Tuesday. Referred to as Operation Dust Storm .PDF by researchers at Cylance, the campaign has managed to stay persistent over the years, and...

CentOS 7 : sos (CESA-2016:0188)

An updated sos package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RedHat Update for sos RHSA-2016:0188-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

eCryptfs-utils mount.ecryptfs_private.c Elevation of Privilege Vulnerability

eCryptfs is an enterprise-class encrypted file system for the Linux platform. In eCryptfs-utils, mount.ecryptfsprivate.c is not verified to load the target filesystem type, and local users can get elevated privileges by loading through a non-standard filesystem...

Unspecified Vulnerability in Oracle E-Business Suite Oracle iReceivables AR Web Utilities Component (CNVD-2016-00636)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle iReceivables AR Web Utilities component, which could be exploited by a remote attacker to submit a special request to modify data...