4773 matches found
The vulnerability of the Moodle learning management system allows a hacker to obtain the user’s password.
The vulnerability of the mtrand function in implementations of randomstring and complexrandomstring of the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user passwords usin...
The vulnerability of the Moodle learning management system allows a hacker to inject arbitrary Web or HTML code.
The vulnerability of the searchpagination function course/classes/managementrenderer.php in the Moodle learning management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code...
The vulnerability of the Moodle learning management system allows a hacker to bypass existing access restrictions.
The vulnerability of the Moodle learning management system’s module selection involves deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions by visiting a specific URL to add or delete answers in a closed state...
The vulnerability of the SAP NetWeaver software integration platform allows a hacker to inject any Web or HTML code.
The vulnerability of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...
Git 版本<=2.7.1 远程代码执行漏洞
参考来源： http://seclists.org/oss-sec/2016/q1/645 Hello, original report describing the overflow is here http://pastebin.com/UX2P2jjg On 11/02/2016 16:50, Jeff King wrote this on the git security mailing list: On Thu, Feb 11, 2016 at 02:31:49PM +0100, 'Laël Cellier' via Git Security wrote: Ok the bug...
Zend Framework < 2.4.9 Encryption Weakness
Binary data 9137.prm...
SUSE SLED11 / SLES11 Security Update : libssh2_org (SUSE-SU-2016:0723-1)
This update for libssh2org fixes the following issues : - Add SHA256 support for DH group exchange fate320343, bsc961964 - fix CVE-2016-0787 bsc967026 - Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys. Note...
SUSE-SU-2016:0723-1 Security update for libssh2_org
This update for libssh2org fixes the following issues: - Add SHA256 support for DH group exchange fate320343, bsc961964 - fix CVE-2016-0787 bsc967026 Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information...
Teaching content management system ATutor 2.2.1 injection vulnerability-vulnerability warning-the black bar safety net
Atutor is an open source“content management system”Learning Content Management System, referred to as LCMS。 Using PHP, MySQL, HTTP Web server is recommended to use Apache. Teaching content management system ATutor 2.2.1 injection vulnerability Atutor in addition to teaching content management...
SUSE SLED12 Security Update : libssh (SUSE-SU-2016:0625-1)
This update for libssh fixes the following issues : - CVE-2016-0739: Fix Weakness in diffie-hellman secret key generation. bsc965875 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...
SUSE-SU-2016:0622-1 Security update for libssh
This update for libssh fixes the following issues: CVE-2016-0739: Fix Weakness in diffie-hellman secret key generation. bsc965875...
ATutor 2.2.1 - SQL Injection / Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ATutor 2.2.1 SQL Injection / Remote Code Execution', 'Description' = %q This module exploits a SQL Injection vulnerability and an...
ATutor 2.2.1 SQL Injection / Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ATutor 2.2.1 SQL Injection / Remote Code Execution', 'Description' = %q This module exploits a SQL Injection vulnerability and an...
ATutor 2.2.1 SQL Injection / Remote Code Execution
This module exploits a SQL Injection vulnerability and an authentication weakness vulnerability in ATutor. This essentially means an attacker can bypass authentication and reach the administrator's interface where they can upload malicious code. Module Options msf use exploit/multi/http/atutor/sq...
The vulnerability of the Flash Player and Adobe Integrated Runtime software allows attackers to bypass the ASLR protection mechanism.
The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using JIT data...
Mousejack Attacks Abuse Vulnerable Wireless Keyboard, Mouse Dongles
Wireless keyboards and mice are the latest peripherals to put enterprise networks and user data at risk. Researchers at Bastille Networks today said that non-Bluetooth devices from seven manufacturers including Logitech, Dell and Lenovo are vulnerable to so-called Mousejack attacks that would all...
Mozilla Firefox < 44.0 Multiple Vulnerabilities
Binary data 9075.prm...