Pragyan CMS 3.0 - SQL Injection

Advisory: SQL injection vulnerability in Pragyan CMS v.3.0 Advisory ID: SROEADV-2015-11 Author: Steffen Rösemann Affected Software: Pragyan CMS v.3 Vendor URL: https://github.com/delta/pragyan, http://delta.nitt.edu/ Vendor Status: vendor did not respond after initial communication CVE-ID: -...

ZeroCMS 1.3.3 SQL Injection

Advisory: SQL injection vulnerabilities in zerocms = v.1.3.3 Advisory ID: SROEADV-2015-13 Author: Steffen Rösemann Affected Software: zerocms = v.1.3.3 released 23rd-Jan-2015 Vendor URL: http://aas9.in/zerocms/ Vendor Status: platform will be moving to Rails4 CVE-ID: - ==========================...

SmartCMS 2 Cross Site Scripting

CVE-2014-9557 SmartCMS Multiple XSS Cross-Site Scripting Security Vulnerabilities Exploit Title: Smartwebsites SmartCMS v.2 Multiple XSS Security Vulnerabilities Product: SmartCMS v.2 Vendor: Smartwebsites Vulnerable Versions: v.2 Tested Version: v.2 Advisory Publication: Jan 22, 2015 Latest...

SmartCMS 2 SQL Injection

CVE-2014-9558 SmartCMS Multiple SQL Injection Security Vulnerabilities Exploit Title: Smartwebsites SmartCMS v.2 Multiple SQL Injection Security Vulnerabilities Product: SmartCMS v.2 Vendor: Smartwebsites Vulnerable Versions: v.2 Tested Version: v.2 Advisory Publication: Jan 22, 2015 Latest Updat...

e107 2.0 Alpha2 Cross Site Request Forgery Vulnerability

e107 version 2.0 Alpha2 suffers from a cross site request forgery vulnerability. Advisory: CSRF vulnerability in CMS e107 v.2 alpha2 Author: Steffen Rösemann Affected Software: CMS e107 v.2 alpha2 Release-Date: 08th-Jun-2014 Vendor URL: http://e107.org Vendor Status: solved CVE-ID: -...

Absolut Engine 1.73 - Multiple Vulnerabilities

Absolut Engine 1.73 - Multiple Vulnerabilities Advisory: Multiple SQL Injections and Reflecting XSS in Absolut Engine v.1.73 CMS Advisory ID: SROEADV-2014-08 Author: Steffen Rösemann Affected Software: CMS Absolut Engine v. 1.73 Vendor URL: http://www.absolutengine.com/ Vendor Status: solved...

Guest OS and Guest DNS name properties are empty or not updating on Hyper-V virtual machines

Challenge Guest OS and Guest DNS name properties are empty or not updating on Hyper-V virtual machines Cause Veeam Management Pack 7.0 R2 for Hyper-V contains a bug which prevents these properties from being collected Solution Patch is available for Veeam Hyper-V Management Pack. Please contact...

Issue with Hyper-V Reports in MP builds 7.0.0.1911 and 7.0.0.1913

Challenge The following Hyper-V reports show no performance data: Performance Forecast for Hyper-V Clusters Performance Forecast for Hyper-V Storage Host Failure Modelling What-If VM Deployment Planning model existing VMs What-If VM Deployment Planning manual resource entry Virtual Machines...

Critical update rollup for Veeam Backup and Replication 8.0.0.817

Challenge Critical update rollup for Veeam Backup and Replication 8.0.0.817 for Hyper-V This update rollup fixes the following Hyper-V processing issues: CBT does not track changes correctly on VHDX disks files larger than 2 TB veeam.com/KB1961 Existing Hyper-V backup and replication jobs...

Existing Hyper-V backup and replication jobs processing VM with SCSI disks start to consume x2 space on target storage after upgrade to v8

Challenge After upgrading to v8 the following issues are observed with the existing jobs processing Hyper-V VMs with SCSI disks: 1. First backup job run will transfer entire VM disks into the incremental backup storage. The following job runs will operate normally - regular incremental restore...

Hyper-V backup or replication job with guest-processing fails after installing Windows Update KB3000853

After installing November roll-up update http://support.microsoft.com/kb/3000853 on 2012 Hyper-V hosts, VSS-enabled backups may be failing in any backup solution. In Veeam you will get "Unable t...

CBT does not track changes correctly on VHDX disks files larger than 2 TB

Challenge Veeam Change Block Tracking CBT driver incorrectly parses virtual disk file change information causing jobs to failover to "full scan" incremental passes in case of VSS backup or to create an empty incremental backup in case of crash-consistent backup when both of the following conditio...

SA-CONTRIB-2014-114 - Tournament - Cross Site Scripting

This project allows you to create various types of tournaments as nodes and associated teams, tournaments, and matches. There are several cases in the project where an account username, node title, and team entity title are not correctly filtered before being displayed to a user. It is possible t...

RHEL 6 : rhev-hypervisor6 3.4.0 (RHSA-2014:0674)

Updated rhev-hypervisor6 packages that fix multiple security issues, several bugs, and add various enhancements are now available. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

RHEL 6 : kernel (RHSA-2014:1101)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.4 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

[SECURITY] Fedora 19 Update: cups-1.6.4-10.fc19

CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

RedHat Update for php RHSA-2014:1327-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

No VM names for Hyper-V in SCOM

Challenge The Hyper-V topology is discovered correctly, however, the Display Names of Virtual Machines are listed as their VM IDs. Example: Additionally, error events 3603 are logged in the OperationsManager event log on the Hyper-V server: VMDiscovery.js : 'vmid' is null or not an object error...

Hyper-V Changed Block Tracking Troubleshooting

Challenge Backup and/or Replication jobs report that changed block tracking is not working properly. Article Applicability This article is only relevant when Veeam Backup & Replication is used with the following Hyper-V versions. In these older versions of Hyper-V there was no native CBT function...

Veeam ONE 7.0 Patch 2 Release Notes

Challenge Release Notes for Veeam ONE 7.0 Patch 2. Cause Please confirm you are running Veeam ONE 7 or Veeam ONE 7R2 prior to installing this update. You can check this under Help | About in Veeam ONE Monitor Client, the build number should be 7.0.0.xxx. After upgrading, your version build will b...