CVE-2016-3231

The CVE-2016-3231 issue affects the Windows Diagnostics Hub Standard Collector Service, where improper handling of the agent DLL path enables local privilege escalation via arbitrary DLL loading. The root cause is unsafe library loading due to not properly sanitizing the input path, allowing an a...

CVE-2016-3231: Undefined Security Weakness

The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

Microsoft Windows Diagnostic Center Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Diagnostic Center Standard Collector Service for Microsoft Windows, which originates from a program failing to properly clean input. A local attacke...

PT-2016-5418

Name of the Vulnerable Software and Affected Versions Windows Diagnostics Hub affected versions not specified Description The issue is related to the mishandling of library loading by the Standard Collector service in Windows Diagnostics Hub, allowing local users to gain privileges via a crafted...

Nfdump Nfcapd 1.6.14 - Multiple Vulnerabilities

Exploit for linux platform in category dos / poc Nfdump Nfcapd Multiple Vulnerabilities Affected Versions: Nfdump = 1.6.14 PDF: http://www.security-assessment.com/files/documents/advisory/Nfdump%20nfcapd%201.6.14%20-%20Multiple%20Vulnerabilities.pdf +-------------+ | Description | +-------------+...

Topology construction failing due to a NullReferenceException

Challenge Management Pack fails to build the environmental topology. The vmspi.log default location: C:\Program Files\Veeam\Veeam Virtualization Extensions for System Center\Collector\Log contains the following entries: + System.NullReferenceException: Object reference not set to an instance of a...

The tasks array included at least one null element

Challenge Management Pack fails to display a segment of the environmental topology or a portion of performance information. The vmspi.log default location: C:\Program Files\Veeam\Veeam Virtualization Extensions for System Center\Collector\Log contains the following entries: + VP038 buildInventory...

Card Collector for FUT 16 - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Card Collector for FUT 16 published at the 'play' market has multiple vulnerabilities...

Ninja Toys Collector - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Ninja Toys Collector published at the 'play' market has multiple vulnerabilities...

Collector - amiibo edition - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Collector - amiibo edition published at the 'play' market has multiple vulnerabilities...

Machinae - Security Intelligence Collector

Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater , another excellent tool for collecting information. The Machinae...

SA110 : Java Deserialization Vulnerabilities

SUMMARY Blue Coat products that deserialize unsafe Java objects from untrusted sources are susceptible to one or more vulnerabilities. A remote attacker can exploit these vulnerabilities to cause the target to execute arbitrary code. AFFECTED PRODUCTS Cloud Data Protection for Salesforce CDP-SFDC...

Security update for Java7 (important)

Update OpenJDK to 7u95 / IcedTea 2.6.4 including the following fixes: Security fixes - S8059054, CVE-2016-0402: Better URL processing - S8130710, CVE-2016-0448: Better attributes processing - S8132210: Reinforce JMX collector internals - S8132988: Better printing dialogues - S8133962,...

Wordpress XML-RPC system.multicall Credential Collector

This module attempts to find Wordpress credentials by abusing the XMLRPC APIs. Wordpress versions prior to 4.4.1 are suitable for this type of technique. For newer versions, the script will drop the CHUNKSIZE to 1 automatically. This module requires Metasploit: https://metasploit.com/download...

[SECURITY] Fedora 23 Update: mono-4.0.5-2.fc23

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

7-Technologies / Schneider-Electric IGSS Data Collector Detection

Binary data scadaapp7tigssdcdetect.nbin...

Amazon Linux AMI : kernel (ALAS-2015-610)

A denial of service vulnerability was discovered in the keyring function's garbage collector in the Linux kernel. The flaw allowed any local user account to trigger a kernel panic. CVE-2015-7872 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...

Debian DSA-3396-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service. - CVE-2015-5307 Ben Serebrin from Google discovered a guest to host denial of service flaw affecting the KVM hypervisor. A malicious guest can trigger an infinite stream of 'alignment check' AC...

[SECURITY] [DSA 3396-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3396-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 10, 2015 https://www.debian.org/security/faq -...