SUSE-SU-2018:1762-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3665: Prevent disclosure of FPU registers including XMM and AVX registers between processes. These registers might contain encryption keys when doin...

CVE-2017-15333

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00,...

WebSocket C2 Communication Channel: WSC2

WSC2 is a PoC of using the WebSockets and a browser process to serve as a C2 communication channel between an agent, running on the target system, and a controller acting as the actuel C2 server. WSC2 is composed of: a controller, written in Python, which acts as the C2 server an agent running on...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0056)

The remote OracleVM system is missing necessary patches to address critical security updates : - Revert 'x86/mm: Expand the exception table logic to allow new handling options' Brian Maly Orabug: 25790387 CVE-2016-9644 - Revert 'fix minor infoleak in getuserex' Brian Maly Orabug: 25790387...

Locky Ransomware Distributed Via DOCM Attachments in Latest Email Campaigns

Throughout August, FireEye Labs has observed a few massive email campaigns distributing Locky ransomware. The campaigns have affected various industries, with the healthcare industry being hit the hardest based on our telemetry, as seen in Figure 1. Figure 1. Top 10 affected industries Numerous...

openSUSE Security Update : Chromium (openSUSE-2016-330)

Chromium was updated to 49.0.2623.75 to fix the following security issues: boo969333 - CVE-2016-1630: Same-origin bypass in Blink - CVE-2016-1631: Same-origin bypass in Pepper Plugin - CVE-2016-1632: Bad cast in Extensions - CVE-2016-1633: Use-after-free in Blink - CVE-2016-1634: Use-after-free i...

openSUSE Security Update : Chromium (openSUSE-2016-316)

Chromium was updated to 49.0.2623.75 to fix the following security issues: boo969333 - CVE-2016-1630: Same-origin bypass in Blink - CVE-2016-1631: Same-origin bypass in Pepper Plugin - CVE-2016-1632: Bad cast in Extensions - CVE-2016-1633: Use-after-free in Blink - CVE-2016-1634: Use-after-free i...

Katana - Framework for Hackers, Professional Security and Developers

Katana is a framework written in python for making penetration testing, based on a simple and comprehensive structure for anyone to use, modify and share, the goal is to unify tools serve for professional when making a penetration test or simply as a routine tool, The current version is not...

CVE-2015-2502

creationtimestamp| type| source ---|---|--- 2015-08-20 07:56:55+00:00| seen| MISP/55d587f8-9fa0-4ac8-98e5-4fa8950d210b 2015-09-07 12:02:56+00:00| seen| MISP/55ed7c41-5a68-4307-8184-43bc950d210b 2020-10-09 16:46:17+00:00| seen| MISP/983d9039-47dd-42d9-b009-13d7885c9ce7 2020-10-09 16:53:25+00:00|...

WordPress XVE Various Embed Plugin <= 1.0.3 - Cross Site Scripting

This plugin is prone to JW player multiple cross site scripting vulnerabilities. Solution Update the plugin...

WordPress XVE Various Embed Plugin <= 1.0.3 - Cross Site Scripting

This plugin is prone to JW player multiple cross site scripting vulnerabilities. Solution Update the plugin...

[SECURITY] Fedora 20 Update: pairs-4.14.1-1.fc20

Pairs is a collection of games aimed to help the development of preschool children. With these games the child can improve memory, logic, hearing and even reading skills. Each game can have different themes so the child is stimulated with different and new challenges...

[SECURITY] Fedora 21 Update: curl-7.37.0-7.fc21

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Katello: Multiple XSS in various entities

Katello has multiple XSS issues in various entities...

XVE Various Embed - JW Player Multiple Cross-Site Scripting Vulnerabilities

The XVE Various Embed WordPress plugin was affected by a JW Player Multiple Cross-Site Scripting Vulnerabilities security vulnerability...

Linux Kernel <= 2.6.17.4 - (proc) Local Root Exploit

No description provided by source. / Author: h00lyshit Vulnerable: Linux 2.6 ALL Type of Vulnerability: Local Race Tested On : various distros Vendor Status: unknown Disclaimer: In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or sprea...

Fedora Update for syncevolution FEDORA-2014-5186

Check for the Version of syncevolution OpenVAS Vulnerability Test Fedora Update for syncevolution FEDORA-2014-5186 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Directory traversal

Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow remote attackers to read arbitrary files via a .. dot dot in 1 the file parameter in a getUpgradeStatus action to servlet/MGConfigData, 2 the download parameter in a download action to servlet/MGConfigDat...

libtiff security update

3.8.2-19 - Resolves: 1063460 CVE-2013-1960 CVE-2013-1961 CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244 libtiff various flaws...

Fedora Update for kdegraphics-thumbnailers FEDORA-2013-10130

Check for the Version of kdegraphics-thumbnailers OpenVAS Vulnerability Test Fedora Update for kdegraphics-thumbnailers FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribu...