Fedora: Security Advisory for sharpziplib (FEDORA-2021-4d31e51987)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Certify - Active Directory Certificate Abuse

Certify is a C tool to enumerate and abuse misconfigurations in Active Directory Certificate Services AD CS. @harmj0y and @tifkin are the primary authors of Certify and the the associated AD CS research blog and whitepaper. Usage C:\ToolsCertify.exe / | | | / | | | | | | | | | / \ '| | | | | | | ...

Gpac MP4Box 缓冲区错误漏洞

MP4Box is a multimedia packager available in GPAC. A stack buffer overflow vulnerability exists in the nhmldmxsendsample function in src/filters/dmxnhml.c:1004 in MP4Box version 1.0.1. An attacker can exploit this vulnerability to cause a denial of service via the szXmlTo parameter...

CVE-2020-20664

libieciccpmod v1.5 contains a segmentation violation in the component serverexample1.c...

CVE-2020-20665

rudp v0.6 was discovered to contain a memory leak in the component main.c...

CVE-2020-20662

libieciccpmod v1.5 contains a heap-buffer-overflow in the component mmsclientexample1.c...

CVE-2020-20664

libieciccpmod v1.5 contains a segmentation violation in the component serverexample1.c...

Heap overflow

libieciccpmod v1.5 contains a heap-buffer-overflow in the component mmsclientexample1.c...

CVE-2020-20664

libieciccpmod v1.5 contains a segmentation violation in the component serverexample1.c...

CVE-2020-20664

CVE-2020-20664 affects libiec_iccp_mod v1.5, with a segmentation fault in the component file server_example1.c. Multiple sources (NVD, Red Hat, OSV, CVE lists) corroborate a segmentation violation as the issue. CVSS data (NVD) indicates a network-origin fault with availability impact (High) under...

CVE-2020-20662

libieciccpmod v1.5 contains a heap-buffer-overflow in the component mmsclientexample1.c...

CVE-2020-20662

CVE-2020-20662 affects libiec_iccp_mod v1.5, with a heap-buffer-overflow in the mms_client_example1.c component. The available sources clearly identify the affected product and the vulnerable function/file, establishing a concrete technical detail set for this entry. The NVD data shows CVSS v3.1 ...

Android Trojan GriftHorse, the gift horse you definitely should look in the mouth

Researchers at Zimperium have discovered an aggressive mobile premium services campaign with over 10 million victims all over the world. The stolen amount could amass hundreds of millions of Euros. The scam was hidden behind malicious Android apps, and the researchers have named the Trojan...

SharpML - Machine Learning Network Share Password Hunting Toolkit

SharpML is a proof of concept file share data mining tool using Machine Learning in Python and C. The tool is discussed in more detail on our blog here, but is summarised below also: SharpML is C and Python based tool that performs a number of operations with a view to mining file shares, queryin...

[SECURITY] Fedora 34 Update: sharpziplib-1.3.3-0.fc34

SharpZipLib, formerly NZipLib is a Zip, GZip, Tar and BZip2 library written entirely in C . It is implemented as an assembly installable in the GAC, and thus can easily be incorporated into other projects...

[SECURITY] Fedora 34 Update: libvirt-7.0.0-7.fc34

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

Rudp 安全漏洞

rudp is a reliable UDP. A security vulnerability exists in Rudp version 0.6, which stems from the inclusion of a memory leak in the component main.c. The vulnerability is caused by the inclusion of a memory leak in the component main.c. The vulnerability is not supported by Rudp...

[SECURITY] Fedora 33 Update: iaito-5.3.1-3.fc33

iaito is a Qt and C++ GUI for radare2. It is the continuation of Cutter before the fork to keep radare2 as backend. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. The iaito is created by reverse engineers for reverse...

openSUSE 15 Security Update : nodejs14 (openSUSE-SU-2021:1313-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1313-1 advisory. - nodejs: Use-after-free on close http2 on stream canceling CVE-2021-22930 - Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to...

LittleCorporal - A C# Automated Maldoc Generator

LittleCorporal: A C Automated Maldoc Generator C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ \ //|| | / /|| // / / / || / / \ / o\ /...