Microsoft Fixes ASLR/DEP Bypass Bug

Buried in the details of the Microsoft Patch Tuesday release for August is the explanation of an important change that the company made to Windows that defeats a group of exploit mitigation bypasses. The change is a small one, but it prevents dangerous attacks that previously worked on most...

Linux Kernel 'MSR' Driver Local Privilege Escalation

No description provided by source. // PoC exploit for /dev/cpu//msr, 32bit userland on a 64bit host // can do whatever in the commented area, re-enable module support, etc // requires CONFIGX86MSR and just uid 0 // a small race exists between the time when the MSR is written to the first // time...

Fedora 19 : fdupes-1.51-1.fc19 (2013-13176)

Upstream - Added support for 64-bit file offsets on 32-bit systems. - Using tty for interactive input instead of regular stdin. This is to allow feeding filenames via stdin in future versions of fdupes without breaking interactive deletion feature. - Fixed some typos in --help. - Turned C++ style...

Fedora 18 : fdupes-1.51-1.fc18 (2013-13166)

Upstream - Added support for 64-bit file offsets on 32-bit systems. - Using tty for interactive input instead of regular stdin. This is to allow feeding filenames via stdin in future versions of fdupes without breaking interactive deletion feature. - Fixed some typos in --help. - Turned C++ style...

Fedora 17 : fdupes-1.51-1.fc17 (2013-13202)

Upstream - Added support for 64-bit file offsets on 32-bit systems. - Using tty for interactive input instead of regular stdin. This is to allow feeding filenames via stdin in future versions of fdupes without breaking interactive deletion feature. - Fixed some typos in --help. - Turned C++ style...

[DLL Finder v1.5] Tool to quickly find the matching DLL in all running Processes

DLL Finder is the command-line tool to quickly find the matching DLL in all running Processes. For each discovered DLL in a process it displays, Target Process Name Process ID Full DLL Name DLL Base Address DLL Load Count DLL File Path On 64 bit system, 32-bit processes are shown with suffix "32"...

CVE-2013-3799

Unspecified vulnerability in Oracle Solaris 10 and 11, when running on AMD64, allows local users to affect availability via unknown vectors related to Kernel...

Oracle Linux 5 : kernel (ELSA-2008-0275)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0275 advisory. 2.6.18-53.1.21.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 62193...

Oracle Linux 4 : shadow-utils (ELSA-2007-0276)

From Red Hat Security Advisory 2007:0276 : Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for...

Oracle Linux 5 : kernel (ELSA-2008-0519)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0519 advisory. - x8664 copyuser doesn't zero tail bytes on page fault Vitaly Mayatskikh 451275 451276 CVE-2008-2729 - x8664 fix possible data leaks in copyfromuser...

Oracle Linux 3 : gdb (ELSA-2007-0469)

From Red Hat Security Advisory 2007:0469 : An updated gdb package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GDB, the GNU debugger, allows debugging of programs written in C, C++, a...

Oracle Linux 4 : kernel (ELSA-2008-0508)

From Red Hat Security Advisory 2008:0508 : Updated kernel packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Lin...

Oracle Linux 4 : gdm (ELSA-2010-0657)

From Red Hat Security Advisory 2010:0657 : An updated gdm package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base scor...

Oracle Linux 4 : w3c-libwww (ELSA-2007-0208)

From Red Hat Security Advisory 2007:0208 : Updated w3c-libwww packages that fix a security issue and a bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. w3c-libwww is a general-purpose web library. Several buffer overflow flaws ...

CVE-2013-3134

CVE-2013-3134 is a remote code execution vulnerability in the Common Language Runtime (CLR) of Microsoft .NET Framework on 64-bit platforms. The issue arises from how the CLR allocates arrays of structures, permitting an attacker to craft a .NET application that alters array data to execute arbit...

VideoLAN VLC Media Player 2.0.7 - '.png' Crash (PoC)

!/usr/bin/python VLC Media Player 2.0.7 PNG Crash PoC Vendor Homepage: http://www.videolan.org/ Version: 2.0.7 Tested on: Windows 7 64-bit Author: Kevin Fujimoto Debug Information: Microsoft R Windows Debugger Version 6.12.0002.633 X86 Copyright c Microsoft Corporation. All rights reserved. wait...

VideoLAN VLC Media Player 2.0.7 - .png Crash (PoC)

VideoLAN VLC Media Player 2.0.7 - .png Crash PoC !/usr/bin/python VLC Media Player 2.0.7 PNG Crash PoC Vendor Homepage: http://www.videolan.org/ Version: 2.0.7 Tested on: Windows 7 64-bit Author: Kevin Fujimoto Debug Information: Microsoft R Windows Debugger Version 6.12.0002.633 X86 Copyright c...

CentOS 4 : w3c-libwww (CESA-2007:0208)

Updated w3c-libwww packages that fix a security issue and a bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. w3c-libwww is a general-purpose web library. Several buffer overflow flaws in w3c-libwww were found. If a client...

CentOS 4 : shadow-utils (CESA-2007:0276)

Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

FixMeStick's first to supports Windows 8 with Secure Boot ON

Windows 8 PCs contain a new technology called Secure Boot that only boots devices that have been verified by Microsoft. Also Microsoft's own Offline Defender won't boot on Windows 8 PCs with Secure Boot on. Neither will Norton's Bootable Recovery Tool. We asked the guys at FixMeStick how their...