Quest Privilege Manager pmmasterd Buffer Overflow Exploit

This Metasploit modules exploits a buffer overflow in the Quest Privilege Manager, a software used to integrate Active Directory with Linux and Unix systems. The vulnerability exists in the pmmasterd daemon, and can only triggered when the host has been configured as a policy server Privilege...

Quest Privilege Manager Elevation of Privilege Vulnerability

Quest Privilege Manager is a comprehensive solution for user privilege management that provides the core functionality needed to quickly elevate and manage user and administrative privileges. pmmasterd is one of the encryption programs. A security vulnerability exists in pmmasterd in Quest...

rentolease.co.uk XSS vulnerability

Vulnerable URL: http://www.rentolease.co.uk/BlogView.asp?SearchPhrase=BUY+TO+LET+ARLA+2014+Ayrshire+property+market%22%27--!%3E%3CScript%20/K/%3Econfirm%22OPENBUGBOUNTY%22%3C/Script%20/K/%3E==123074==6 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

inzeromat.cz XSS vulnerability

Vulnerable URL: https://www.inzeromat.cz/?utmsource=knoxss.me"'--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 938363 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

The Backstory Behind Carder Kingpin Roman Seleznev’s Record 27 Year Prison Sentence

Roman Seleznev, a 32-year-old Russian cybercriminal and prolific credit card thief, was sentenced Friday to 27 years in federal prison. That is a record punishment for hacking violations in the United States and by all accounts one designed to send a message to criminal hackers everywhere. But a...

bygghemma.se XSS vulnerability

Vulnerable URL: https://www.bygghemma.se/sok?phrase=b%27-alertOPENBUGBOUNTY-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 94205 VIP website status:| No Check bygghemma.se SSL...

Quest Privilege Manager pmmasterd Buffer Overflow

This modules exploits a buffer overflow in the Quest Privilege Manager, a software used to integrate Active Directory with Linux and Unix systems. The vulnerability exists in the pmmasterd daemon, and can only triggered when the host has been configured as a policy server Privilege Manager for Un...

Threat Outbreak Alert RuleID28282: Email Messages Distributing Malicious Software on March 27, 2017

Medium Alert ID: 53171 First Published: 2017 March 27 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28282 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28269: Email Messages Distributing Malicious Software on March 27, 2017

Medium Alert ID: 53170 First Published: 2017 March 27 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28269 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28479: Email Messages Distributing Malicious Software on March 27, 2017

Medium Alert ID: 53173 First Published: 2017 March 27 13:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28479 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28485: Email Messages Distributing Malicious Software on March 27, 2017

Medium Alert ID: 53176 First Published: 2017 March 27 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28485 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID27678: Email Messages Distributing Malicious Software on March 27, 2017

Medium Alert ID: 53164 First Published: 2017 March 27 12:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27678 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID27822: Email Messages Distributing Malicious Software on March 27, 2017

Medium Alert ID: 53163 First Published: 2017 March 27 12:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27822 may contain the following files: Name | Si...

CVE-2017-2447

creationtimestamp| type| source ---|---|--- 2017-03-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41743...

CVE-2017-5227

creationtimestamp| type| source ---|---|--- 2017-03-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41745...

AZL-7181 CVE-2017-6838 affecting package audiofile 0.3.6-27

Integer overflow in sfcommands/sfconvert.c in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

AZL-7172 CVE-2017-6829 affecting package audiofile 0.3.6-27

The decodeSample function in IMA.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

AZL-36922 CVE-2017-6830 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the alaw2linearbuf function in G711.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

AZL-7176 CVE-2017-6833 affecting package audiofile 0.3.6-27

The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service divide-by-zero error and crash via a crafted file...

AZL-7174 CVE-2017-6831 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...