– Update to 4.0.3
– Security fix for CVE-2016-2120, CVE-2016-7068, CVE-2016-7072, CVE-2016-7073, CVE-2016-7074
Release notes 4.0.2: https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402
Release notes 4.0.3: https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-403
– Update to 4.0.3
– Security fix for CVE-2016-2120, CVE-2016-7068, CVE-2016-7072, CVE-2016-7073, CVE-2016-7074
Release notes 4.0.2: https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402
Release notes 4.0.3: https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-403
TYPO3 CMS versions 2.0.3 and below suffer from a cross site scripting vulnerability.
BoZon version 2.4 suffers from a pre-authentication remote command execution vulnerability.
Things are about to get a lot safer on the internet with SHA-2, but there is plenty of work still to be done when it comes to SHA-1 deprecation.
dirList version 0.3.0 suffers from file upload bypass and remote command execution vulnerabilities.
Atlassian Jira version 7.1.7 suffers from a cross site scripting vulnerability.
WordPress Direct Download for WooCommerce versions up to 1.15 suffer from a local file inclusion vulnerability.
EuskalHack Security Congress is the first Ethical Hacking association in Euskadi, with the aim of promoting the community and culture in digital security to anyone who may be interested. It will be held June 23rd through the 24th, 2017 in Donostia – San Sebastian.
TrueOnline is a Thai ISP that distributes customized versions of ZyXEL and Billion routers – customized with vulnerabilities that is. The routers contain several default administrative accounts and command injections that can be abused by authenticated and unauthenticated attackers.