CentOS Errata and Enhancement Advisory 2014:1355 Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1355.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8478a7a8c207e68435859480f155e86325841242aefbb31a9f9171cf01f394fa tzdata-2014h-1.el6.noarch.rpm c9aa98d2cb42be7efdd49f5268a9d268a3195df83a45477080aa65995c413f50 tzdata-java-2014h-1.el6.noarch.rpm x86_64: 8478a7a8c207e68435859480f155e86325841242aefbb31a9f9171cf01f394fa tzdata-2014h-1.el6.noarch.rpm c9aa98d2cb42be7efdd49f5268a9d268a3195df83a45477080aa65995c413f50 tzdata-java-2014h-1.el6.noarch.rpm Source: 66a194c5537755201e4a510d251303e2e4bbdac0e1f49911a6e6d583e5100d10 tzdata-2014h-1.el6.src.rpm
Monthly Archives: October 2014
JPMorgan Breach Hints at Financial Sector Bombardment – Third Certainty
Finding the Right Approach: Three Ways to Protect Your Virtual Environment – Virtual Strategy Magazine
Me and My Job: Michael Canavan, Kaspersky Lab North America – SC Magazine
Kaspersky Expands Partnership with INTERPOL, Europol – Info Security
AV-Test Institute Rates Antivirus Protection – PC Magazine
WordPress BulletProof Security 50.8 Script Insertion
WordPress BulletProof Security plugin version 50.8 suffers from a script insertion vulnerability.
Shellshock Bashed CGI RCE
This Metasploit module exploits the shellshock vulnerability in apache cgi. It allows you to execute any metasploit payload you want.
Threatpost News Wrap, October 3, 2014
Dennis Fisher and Mike Mimoso talk about the Bash Shellshock bug nightmare and the BadUSB code release.
HTTP Commander AJS 3.1.9 Exception Cross Site Scripting
HTTP Commander AJS version 3.1.9 suffers from a cross site scripting vulnerability that can be exploited via exception handling.