Cross-site scripting (XSS) vulnerability in httpd in ASUS ASUSWRT on RT-AC53 3.0.0.4.380.6038 devices allows remote attackers to inject arbitrary JavaScript by requesting filenames longer than 50 characters.
Monthly Archives: March 2017
CVE-2017-6556 (cms_made_simple)
Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the “adminpage > sitesetting > General Settings > globalmetadata” field.
CVE-2017-6558
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.
Cloudy with a chance of malware
While overall IT budgets are experiencing minimal growth – a compound annual growth rate of 0.9 percent in 2016 (to $3.4 trillion) – the sky is the limit when it comes to cloud: Cloud infrastructure spending will increase 16.2 percent in 2016 to $37.4 billion, with a 5-year CAGR of 13.6 percent to $60.8 billion in 2020. That’ss just the hardware; public cloud services are expected to reach $208 billion in 2016, up from $178 billion in 2015. Gartner attributes the growth to the fact that organizations are saving 14 percent of their budgets as an outcome of public cloud adoption.
texlive-2016-33.20160520.fc26
Security fix for CVE-2016-10243
Don’t be an IRS phone scam's next victim. Start tax season safe.
Ever answered your mobile phone only to find silence? Or that a machine has called you? Or even that it’s a completely unexpected call from someone claiming to be from the Internal Revenue Service (IRS)?
firefox-52.0-1.fc26
For changes see https://www.mozilla.org/en-US/firefox/52.0/releasenotes/
wireshark-2.2.5-1.fc25
Security fix for
Bugtraq: [security bulletin] HPESBHF03713 rev.1 – HPE Intelligent Management Center (IMC) PLAT, Deserialization of Untrusted Data, Remote Code Execution
[security bulletin] HPESBHF03713 rev.1 – HPE Intelligent Management Center (IMC) PLAT, Deserialization of Untrusted Data, Remote Code Execution
Bugtraq: [SECURITY] [DSA 3804-1] linux security update
[SECURITY] [DSA 3804-1] linux security update