New answers tagged

1

The variable @@version returns the current SQL Server version. Examples here: Microsoft SQL Server 2008 R2 (RTM) - 10.50.1600.1 (X64) Apr 2 2010 15:48:46 Copyright (c) Microsoft Corporation Enterprise Edition (64-bit) on Windows NT 6.0 (Build 6002: Service Pack 2) Going back to basics, to manually find a SQL injection ...


1

CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices This vulnerability has low impact on RHEL, because by default the option ChallengeResponseAuthentication is disabled in default configuration. Though it is or will be fixed in RHEL 6 and 7. CVE-2016-1907: openssh: out-of-bounds read in packet handling code This one does not ...


2

Whether you could pursue legal action depends on the contract and terms of service you have established, however that's probably not the right way to go as it will cost you money and lose you at least one customer. You might also discourage your customers from having penetration testing done, which would be a bad thing. I would recommend educating all ...


1

What kind of service are you providing? It depends on your TOS what users can and can not do, if you have a hosting service it depends on your TOS if a user can scan his hosting account for exploits with automated means without your prior consent. Most secure aware people DO test their production scripts/programs not only on localhost, because configuration ...


3

If openssl was patched recently and you have not restarted all services which are using libssl you may have to reboot your machine in order to complete the openssl patching. By running following command you can see what services are using libssl: lsof | grep -i libssl | grep DEL | awk '{print $1}' | sort | uniq



Top 50 recent answers are included