Advantech WebAccess 8.1 Post Authentication Credential Collector

This module allows you to log into Advantech WebAccess 8.1, and collect all of the credentials. Although authentication is required, any level of user permission can exploit this vulnerability. Note that 8.2 is not suitable for this. This module requires Metasploit: https://metasploit.com/downloa...

CVE-2016-3147

Buffer overflow in the collector.exe listener of the Landesk Management Suite 10.0.0.271 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large packet...

Denial Of Service (DoS)

wicked is vulnerable to denial of service DoS attacks. A malicious user can create a large number of symbols which isn't cleared by the garbage collector, which can cause a denial of service by consuming resources...

Cannot read event log Veeam MP – Management Servers

Challenge Error accessing event log on SCOM Management servers - Error 31551, 31552 in Event logs. Cause Starting in Veeam Management Pack for Microsoft System Center version 8, Dataset rules are used to collect host security profiles and snapshots. When a collector is installed on an agent, no...

DEBIAN-CVE-2016-9427

Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service heap buffer overflow crash and possibly execute arbitrary code via huge allocation...

UBUNTU-CVE-2016-9427

Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service heap buffer overflow crash and possibly execute arbitrary code via huge allocation...

Atlassian JIRA 6.4.x < 6.4.10 CSRF / XSRF (Bar Mitzvah)

Binary data 9736.prm...

CVE-2016-7188

The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

CVE-2016-7188

The CVE-2016-7188 issue affects the Windows Diagnostics Hub Standard Collector Service on Windows 10 (Gold, 1511, 1607). The root cause is improper sanitization of input during library loading, leading to untrusted library loading and elevation of privileges for a local attacker who runs a crafte...

Graylog Collector 0.4.2 - Unquoted Service Path Privilege Escalation

Graylog Collector 0.4.2 - Unquoted Service Path Privilege Escalation Exploit Title: Graylog Collector Service Path Privilege Escalation Date: 10/14/2016 Exploit Author: Joey Lane Software Link: https://github.com/Graylog2/collector Version: 0.4.2 Tested on: Windows Server 2012 R2 Graylog Collecto...

Graylog Collector 0.4.2 - Unquoted Service Path Privilege Escalation

Exploit Title: Graylog Collector Service Path Privilege Escalation Date: 10/14/2016 Exploit Author: Joey Lane Software Link: https://github.com/Graylog2/collector Version: 0.4.2 Tested on: Windows Server 2012 R2 Graylog Collector installs as a service with an unquoted service path. If the user...

Microsoft Windows Diagnostics Hub Privilege Elevation Vulnerability (3193229)

This host is missing an important security update according to Microsoft Bulletin MS16-125. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Diagnostics Hub Elevation of Privilege (MS16-125: CVE-2016-7188)

An elevation of privilege vulnerability exists in Microsoft Windows within the Diagnostics Hub component. The vulnerability is caused when inputs are not properly sanitized by the Windows Diagnostics Hub Standard Collector Service . A successful exploitation could allow an attacker to run arbitra...

USN-3045-1 PHP vulnerabilities | Cloud Foundry

USN-3045-1 PHP vulnerabilities Medium Vendor PHP Versions Affected Cloud Foundry PHP buildpack versions prior to 4.3.18 Note: The PHP buildpack is patched from upstream PHP source Description It was discovered that PHP incorrectly handled certain SplMinHeap::compare operations. A remote attacker...

PT-2016-3435 · Gnu +3 · Bdwgc +3

Name of the Vulnerable Software and Affected Versions: bdwgc versions prior to 2016-09-27 Description: The issue is related to an integer overflow, which can cause a heap buffer overflow crash and potentially allow the execution of arbitrary code via huge allocation. It is also described as a...

SUSE-SU-2016:1842-1 Security update for php5

This update for php5 fixes the following issues: It is possible to launch a web server with 'php -S localhost:8080' It used to be possible to set an arbitrary $HTTPPROXY environment variable for request handlers -- like CGI scripts -- by including a specially crafted HTTP header in the request...

Fedora 23 : nfdump (2016-54dfd21f15)

nfdump 1.6.15 released. --- - Fix Security issue http://www.security-assessment.com/files/documents/advis ory/Nfdump%20nfcapd%201.6.14%20-%20Multiple%20Vulnerabil ities.pdf - Fix obyte, opps and obps output records - Fix wrong bps type case in cvs output. Fix opbs ipbs typos nfdump 1.6.14 release...

Fedora 24 : nfdump (2016-a771d67ba0)

nfdump 1.6.15 released. --- - Fix Security issue http://www.security-assessment.com/files/documents/advis ory/Nfdump%20nfcapd%201.6.14%20-%20Multiple%20Vulnerabil ities.pdf - Fix obyte, opps and obps output records - Fix wrong bps type case in cvs output. Fix opbs ipbs typos nfdump 1.6.14 release...

PHP memory misreference vulnerability (CNVD-2016-04368)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A memory misreference vulnerability exists in PHP's GC algorithm and unserialize function, which can be exploited by remote attackers to execute...

Microsoft Internet Explorer 11 - Garbage Collector Attribute Type Confusion (MS16-063)

Exploit for windows platform in category dos / poc !-- CVE-2016-0199 / MS16-063: MSIE 11 garbage collector attribute type confusion ============================================================================ This information is available in an easier to read format on my blog at...