985 matches found
Analysis Firefox the shared array buffer of the UAF exploit-vulnerability warning-the black bar safety net
This article explores the structured cloning algorithm to handle the shared array buffer occurs when a reference leakage problems. While the lack of overflow checking, can be exploited to execute arbitrary code. Is divided into the following sections: Background, vulnerability, summary We exploit...
Flash Player < 26.0.0.126 Multiple RCE (APSB17-17)
Binary data 700144.prm...
CVE-2017-8515
CVE-2017-8515 affects Microsoft Windows 10 versions 1511, 1607, and 1703, and Windows Server 2016. The vulnerability allows an unauthenticated, local attacker to send a specially crafted kernel-mode request to trigger a denial of service on the target system (Windows VAD Cloning Denial of Service...
Windows VAD Cloning Denial of Service Vulnerability
A denial of service vulnerability exists in Microsoft Windows when an unauthenticated attacker sends a specially crafted kernel mode request. An attacker who successfully exploited this vulnerability could cause a denial of service on the target system, causing the machine to either stop respondi...
Generating SSH Keys is broken (using Bitbucket Server) -- ui and config file
Please watch my short video illustrating the experience. https://www.youtube.com/watch?v=wPUAkG78BFE&feature=youtu.be Scenario 1: On MacOS X Sierra when setting up SourceTree for first time and choosing "SSH" as the authentication method, SourceTree: Should not have a URL for the Bitbucket...
Envoy: Primary Cloning of Envoy web application resulting confidential information disclosure
It is possible to mirror envoy website which exposes internal structure as also client side java-script and CSS . When an attacker makes a copy of your webpages on their local machine, it is possible scan the code for vulnerabilities to exploit without generating additional traffic on your web...
Product update: Virtuozzo 7.0 Update 3
The new packages for Virtuozzo 7.0 introducing new features and bug fixes. Vulnerability id: PSBM-56838 Kernel panic when creating ploops on NVMe devices. Vulnerability id: PSBM-56668 HWIDs could not be obtained for SGI UV 1000 nodes. Vulnerability id: PSBM-56667 vzlicview could incorrectly detec...
Docebo LMS v6.9 - (Clone Links) Persistent Vulnerability
Document Title: =============== Docebo LMS v6.9 - Clone Links Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1878 Release Date: ============= 2016-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 187...
Docebo LMS v6.9 - (Clone Links) Persistent Vulnerability
Document Title: =============== Docebo LMS v6.9 - Clone Links Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1878 Release Date: ============= 2016-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 187...
Important: Red Hat Security Advisory: CFME 5.6.3 security, bug fix, and enhancement update
An update is now available for Red Hat CloudForms 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...
Microsoft Windows - VHDMP Arbitrary Physical Disk Cloning Privilege Escalation (MS16-138) Exploit
Exploit for windows platform in category local exploits / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=916 Windows: VHDMP Arbitrary Physical Disk Cloning EoP Platform: Windows 10 10586. No idea about 14393, 7 or 8.1 versions. Class: Elevation of Privilege Summary: The VHDMP...
Microsoft Windows - VHDMP Arbitrary Physical Disk Cloning Privilege Escalation (MS16-138)
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=916 Windows: VHDMP Arbitrary Physical Disk Cloning EoP Platform: Windows 10 10586. No idea about 14393, 7 or 8.1 versions. Class: Elevation of Privilege Summary: The VHDMP driver doesn’t open physical disk drives securely when...
FOG Server Detection
Detection of FOG Server The script sends a connection request to the server and attempts to detect the presence of FOG Server and to extract its version SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
GATTacker - BLE (Bluetooth Low Energy) Man-in-the-Middle
A Node.js package for BLE Bluetooth Low Energy security assessment using Man-in-the-Middle and other attacks. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install npm install gattacker Usage Configure Running both components Set up variables in...
King Phisher 1.5.2 - Phishing Campaign Toolkit
King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...
Researcher Proves Viability of NAND Mirroring to Bypass iPhone Passcode Restrictions
NAND mirroring was outright dismissed by FBI director James Comey as a means of breaking into San Bernardino terrorist Syed Farook’s iPhone 5c during the government’s spat with Apple earlier this year. “It doesn’t work,” Comey said. Well, turns out, it does. Sergei Skorobogatov of the University ...
PHP 7.0 - Object Cloning Local Denial of Service
PHP 7.0 - Object Cloning Local Denial of Service obj = clone $this; return $this-obj; $obj = new MyCloneableClass; $obj2 = clone $obj; ?...
PHP 7.0 - Object Cloning Local Denial of Service
Exploit for php platform in category dos / poc obj = clone $this; return $this-obj; $obj = new MyCloneableClass; $obj2 = clone $obj; ? 0day.today 2018-02-15...
