Apple OS X IOGraphicsFamily Elevation of Privilege Vulnerability

Apple OS X is an operating system from Apple. Apple OS X suffers from an elevation of privilege vulnerability that stems from the failure of the IOGraphicsFamily interface to validate user-supplied function addresses before use, allowing a local attacker to exploit the vulnerability to elevate...

方维O2O系统 后台越权漏洞泄露用户详细地址

No description provided by source...

Machinae - Security Intelligence Collector

Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater , another excellent tool for collecting information. The Machinae...

Kaltura Community Edition 11.1.0-2 - Multiple Vulnerabilities

Kaltura Community Edition 11.1.0-2 - Multiple Vulnerabilities , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Kaltura Community Edition Multiple Vulnerabilities Affected versions: Kaltura Community...

OnionCat - An Anonymous VPN-Adapter (P2P layer 3 VPN based on Tor or I2P)

OnionCat is a VPN-adapter which allows to connect two or more computers or networks through VPN-tunnels. It is designed to use the anonymization networks Tor or I2P as its transport, hence, it provides location-based anonymity while still creating tunnel end points with private unique IP addresse...

Android Linux kernel information disclosure vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and the Linux kernel is the kernel used by Linux, the operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'pagemapopen'...

DEBIAN-CVE-2016-1954

The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy CSP violation report, which allows remote attackers to cause a denial of service data...

Mozilla Firefox and Firefox ESR Page Forgery Vulnerability

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . Mozilla Firefox and Firefox ESR suffer from a security vulnerability i...

DEBIAN-CVE-2016-0823

The pagemapopen function in fs/proc/taskmmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721...

UBUNTU-CVE-2016-0823

The pagemapopen function in fs/proc/taskmmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721...

Security Intelligence Collector: Machinae

Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater , another excellent tool for collecting information. The Machinae...

Microsoft Windows - NetAPI32.dll Code Execution (Python) (MS08-067)

Microsoft Windows - NetAPI32.dll Code Execution Python MS08-067 import struct import time import sys from threading import Thread Thread is imported incase you would like to modify try: from impacket import smb from impacket import uuid from impacket import dcerpc from impacket.dcerpc.v5 import...

Judge Confirms CMU Paid to Break Tor

A U.S. district court judge has confirmed what has probably been the worst-kept secret in security, that Carnegie Mellon University’s Software Engineering Institute was indeed contracted by the Department of Defense to study how to break Tor anonymity. A motion to compel discovery filed by Brian...

Judge Confirms Government Paid CMU Scientists to Hack Tor Users for FBI

Everything is now crystal clear: The security researchers from Carnegie Mellon University CMU were hired by the federal officials to discover a technique that could help the FBI Unmask Tor users and Reveal their IP addresses as part of a criminal investigation. Yes, a federal judge in Washington...

UBUNTU-CVE-2015-5345

The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing /...

dotDefender Cross-Site Request Forgery Vulnerability

dotDefender is a suite of real-time network monitoring tools that provide comprehensive monitoring of networks, protection against malicious attacks by hackers, and more. A cross-site request forgery vulnerability exists in dotDefender that allows remote attackers to construct malicious URIs, tri...

Citrix Systems NetScaler Application Delivery Controller and NetScaler Gateway Clickjacking Vulnerability

Citrix Systems NetScaler ADC is a suite of service and application delivery solutions; NetScaler Gateway is a secure remote access solution. A clickjacking vulnerability exists in Citrix Systems NetScaler ADC and NetScaler Gateway, which allows an attacker to construct malicious URIs, trick users...

Cisco Universal Small Cell Devices Unauthorized Firmware Retrieval Vulnerability

A vulnerability in Cisco Universal Small Cell devices could allow an unauthenticated, remote attacker to retrieve firmware from a Cisco-hosted binary server. The vulnerability is due to insufficient enforcement of the two-way certificate validation process by the Cisco-hosted binary server to...

RHEL 7 : kernel (RHSA-2016:0103)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0103 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. It was found that the x86 ISA Instruction Set...

Ubuntu 15.04 : linux vulnerabilities (USN-2889-1)

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...