[SECURITY] Fedora 24 Update: krb5-1.14.1-3.fc24

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 23 Update: krb5-1.14.1-3.fc23

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 23 Update: krb5-1.14-7.fc23

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 23 Update: krb5-1.14-6.fc23

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 21 Update: krb5-1.12.2-19.fc21

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 22 Update: krb5-1.13.2-10.fc22

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 23 Update: krb5-1.13.2-12.fc23

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

致远A8-V5协同管理软件日志信息泄露

致远A8-V5日志信息泄露，包括UC认证信息和ctp信息,ctp日志内含有密码信息一、ctp信息泄露包含系统内运行信息，如某某用户登录，某某用户操作功能等等http://a8v51.seeyon.com/seeyon/logs/ctp.log可以利用此处泄露信息获取系统内大量账户信息，包括密码信息二、UC认证信息泄露，包括token等信息http://a8v51.seeyon.com/seeyon/logs/uc.log如果UC配置在互联网或者本地恶意员工利用可以劫持UC登录。...

[SECURITY] Fedora 21 Update: krb5-1.12.2-17.fc21

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

致远A8-V5存在任意用户密码修改漏洞

简要描述： 致远A8-V5存在两个漏洞 一是无视验证码撞库 二是任意用户密码修改 详细说明： 一是无视验证码撞库 致远A8-V5在设计时存在逻辑错误，用户修改密码时对原密码进行了验证，但是验证使用的服务存在未授权访问漏洞，系统对非合法请求的原密码验证功能进行回应，导致了无视验证码，无需login页面进行密码尝试 二是任意用户密码修改 致远A8-V5在设计时存在逻辑错误，在上一步对原始密码进行验证后，下一步不再检测原始密码，从而直接修改用户密码，导致平行权限的越权漏洞。 漏洞证明： 一是无视验证码撞库 POST穷举用户和密码代码如下 GET...

[SECURITY] Fedora 21 Update: krb5-1.12.2-14.fc21

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

openSUSE Security Update : curl (openSUSE-2015-125)

was updated to version 7.40.0 to fix two security issues. These security issues were fixed : - CVE-2014-8150: CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allowed remote attackers to inject arbitrary HTTP headers and conduct HTTP response...

致远A8-V5协同管理软件未授权访问(通杀V5，获取系统内各种缓存信息)

简要描述： 致远A8-V5协同管理软件存在未授权访问，可以利用普通用户权限访问system权限页面，获取大量缓存信息，如用户信息。 详细说明： 利用之前提交的漏洞“致远A8-V5协同管理软件日志信息泄露通杀V5”获取到的某弱口令用户对http://a8v51.seeyon.com进行测试，发现致远A8-V5协同管理软件还存在未授权访问，可以利用普通用户权限访问system权限页面，获取大量缓存信息，如2000+用户信息。 漏洞证明： 登录某普通用户 访问 http://a8v51.seeyon.com/seeyon/ctp/sysmgr/monitor/cacheDump.do...

Qibo Menhu V5 /wei/js.php SQL注入漏洞

/wei/js.php elseif$type=='like' $SQL.=" AND id!='$id' "; if!$keyword extract$db-getone"SELECT keywords AS keyword FROM $precontent WHERE id='$id'"; if$keyword $SQL.=" AND "; $keyword=urldecode$keyword; $detail=explode" ",$keyword; unset$detail2; foreach $detail AS $key=$value $detail2=" BINARY...

Schneider Electric StruxureWare SCADA Expert ClearSCADA Parsing Vulnerability

OVERVIEW Andrew Brooks identified and reported to The Zero Day Initiative ZDI a File Parsing Vulnerability: Schneider Electric StruxureWare SCADA Expert ClearSCADA ServerMain.exe OPF File Parsing Vulnerability. Schneider Electric has prepared workarounds and helped develop security upgrades for a...

Qibo Menhu v5 /zhuangxiu/job.php SQL注入漏洞

/zhuangxiu/inc/job/postimg.phpforeach $FILES AS $key=$value $i=intsubstr$key,10; ifisarray$value $postfile=$value'tmpname'; $arrayname=$value'name'; $arraysize=$value'size'; else $postfile=$$key; $arrayname=$$key.'name'; $arraysize=$$key.'size'; if$ftype$i=='in'&&$arrayname...

Qibo Menhu v5 /hr/listperson.php 本地文件包含漏洞

No description provided by source...

Qibo Menhu V5 /hy/member/homepage_ctrl.php SQL注入漏洞

No description provided by source...

[SECURITY] Fedora 21 Update: krb5-1.12.2-9.fc21

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 20 Update: krb5-1.11.5-11.fc20

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...