Symantec Endpoint Protection Manager 12.1.x - SEH Overflow POC

===================================================================================== This POC code overwrite EIP with "CCCCCCCC" About KCS Key: That key is used to obfuscate traffic between client and server. The key is generated during SEPM installation. We need that key to talk with the SEPM...

SmartSniff - Capture TCP/IP packets on your network adapter

SmartSniff is a network monitoring utility that allows you to capture TCP/IP packets that pass through your network adapter, and view the captured data as sequence of conversations between clients and servers. You can view the TCP/IP conversations in Ascii mode for text-based protocols, like HTTP...

[DNmap] Distributed Nmap Framwork

DNmap is a distributed nmap framwork using a client/server architecture. The server reads the commands from a file and send them to each client. The client execute the nmap command and send the results back. Download DNmap...

CVE-2014-1242

Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream...

ISC DHCP: Denial of service

Background ISC DHCP is a Dynamic Host Configuration Protocol DHCP client/server. Description ISC DHCP is vulnerable to a memory exhaustion attack involving regular expressions sent by DHCP clients. Impact A remote attacker could send a specially crafted request from a malicious or spoofed client,...

CVE-2013-6427

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing HPLIP 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream...

CVE-2013-6427

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing HPLIP 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream...

USN-2027-1: SPICE vulnerability

Tomas Jamrisko discovered that SPICE incorrectly handled long passwords in SPICE tickets. An attacker could use this issue to cause the SPICE server to crash, resulting in a denial of service...

[SECURITY] Fedora 20 Update: community-mysql-5.5.34-1.fc20

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

Fedora Update for community-mysql FEDORA-2013-19654

Check for the Version of community-mysql OpenVAS Vulnerability Test Fedora Update for community-mysql FEDORA-2013-19654 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

[SECURITY] Fedora 18 Update: mysql-5.5.34-1.fc18

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

[SECURITY] Fedora 19 Update: community-mysql-5.5.34-1.fc19

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

CVE-2013-5971

Consolidated detail: CVE-2013-5971 is a session fixation vulnerability in VMware vCenter Server 5.0 before Update 3, specifically in the vSphere Web Client Server. The issue arises from how session IDs are handled, potentially allowing remote attackers to hijack web sessions and gain privileges. ...

PT-2013-5894

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 5.0 through 5.0 Update 2 Description A session fixation issue in the vSphere Web Client Server allows remote attackers to hijack web sessions and gain privileges. Recommendations For versions 5.0 through 5.0 Upda...

CVE-2013-5971: Undefined Security Weakness

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors...

Code injection

Baramundi Management Suite 7.5 through 8.9 uses cleartext for 1 client-server communication and 2 data storage, which allows remote attackers to obtain sensitive information by sniffing the network, and allows context-dependent attackers to obtain sensitive information by reading a file...

PT-2013-4115

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1 through 7.1.2.12 IBM Rational ClearQuest versions 8.0 through 8.0.0.8 IBM Rational ClearQuest versions 8.0.1 through 8.0.1.1 Description The issue allows remote attackers to obtain sensitive information fro...

[SECURITY] Fedora 18 Update: nas-1.9.3-4.fc18

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

[SECURITY] Fedora 19 Update: nas-1.9.3-7.fc19

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

CVE-2013-5492

Cisco SocialMiner’s administration.jsp contains an information-disclosure vulnerability (Bug CSCuh76780) that could allow an unauthenticated, remote attacker to obtain sensitive user information by sniffing HTTP traffic between a SocialMiner client and server. The issue stems from insecure HTTP h...