8265 matches found
yarGen - A Generator for Yara Rules (for malware researchers)
yarGen is a generator for Yara rules. What does yarGen do? The main principle is the creation of yara rules from strings found in malware files while removing all strings that also appear in goodware files. Since version 0.14.0 it uses naive-bayes-classifier by Mustafa Atik and Nejdet Yucesoy in...
Stack overflow
Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument...
CVE-2015-3259
Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument...
EMC RecoverPoint for Virtual Machines Privileged Access Vulnerability
EMC RecoverPoint for Virtual Machines VMs is a disaster recovery solution for VMware environments from EMC. The solution provides local and remote hypervisor-based replication, continuous data protection by VM recovery to any point in time, and automated disaster recovery process orchestration. A...
Android adb backup vulnerability exists that can be injected into the malicious APK-vulnerability warning-the black bar safety net
! Android in the system backup after the restore process on the existence of a serious Vulnerability, CVE-2 0 1 4-7 9 5 2, and so an attacker can inject malicious apk file to a backup filethus reducing the time a malicious app installed on the go. The vulnerability is by the Android command-line...
xl command line config handling stack overflow
ISSUE DESCRIPTION The xl command line utility mishandles long configuration values when passed as command line arguments, with a buffer overrun. VULNERABLE SYSTEMS Systems built on top of xl which pass laundered or checked but otherwise untrusted configuration values onto xl's command line, witho...
SOL16914 - OpenSSL vulnerability CVE-2015-1791
For BIG-IP, Enterprise Manager, and BIG-IQ systems, the vulnerable code exists on the system; however, it is not used in the way that exposes the system to the vulnerability. For LineRate systems, the vulnerable code exists on the system; however, it is not used in the way that exposes the system...
xen-tools -- xl command line config handling stack overflow
The Xen Project reports: The xl command line utility mishandles long configuration values when passed as command line arguments, with a buffer overrun. A semi-trusted guest administrator or controller, who is intended to be able to partially control the configuration settings for a domain, can...
Stealthy PHP Web Shell Backdoor: Weevely
Stealthy PHP Web Shell Backdoor Weevely is a command line web shell dinamically extended over the network at runtime used for administration and pen testing of remote web accesses. It provides a weaponized telnet-like console through a PHP script running on the target, even in restricted...
Cisco Nexus Device NS-OS Software Command Line Interpreter Local Elevation of Privilege Vulnerability
Nexus is Cisco's line of network switches designed for data centers. Multiple elevation of privilege vulnerabilities exist in the command line interpreter of Cisco Nexus devices with invalid parameter input filtering for the tar command, which can be exploited by an authenticated, local attacker ...
Cisco Nexus Operating System Devices Command Line Interface Local Privilege Escalation Vulnerability
A vulnerability in the Command Line Interface CLI parser of Cisco Nexus Operating System NX-OS devices could allow an authenticated, local attacker to perform a privilege escalation. The vulnerability is due to improper input validation of special characters within filenames. An attacker could...
The vulnerability of the Cisco UCS Central device’s centralized management system allows a perpetrator to gain privileges necessary to execute operating system commands.
The vulnerability of the Cisco UCS Central device management system exists because measures to neutralize the special elements used in the operating system command are not taken. Exploiting this vulnerability can allow a malicious actor, operating locally, to gain privileges necessary to execute...
[SECURITY] Fedora 20 Update: xen-4.3.4-6.fc20
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 21 Update: xen-4.4.2-6.fc21
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 22 Update: xen-4.5.0-11.fc22
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Cheat - Create and view interactive cheatsheets on the command-line
cheat allows you to create and view interactive cheatsheets on the command-line. It was designed to help remind nix system administrators of options for commands that they use frequently, but not frequently enough to remember. cheat depends only on python and pip. Example The next time you're...
Cisco UCS Central Software Command Line Interface Command Injection Vulnerability
Cisco UCS Central Software is a U.S. Cisco Cisco company's computing, virtualization and networking in one software platform. A security vulnerability exists in the command line interface of Cisco UCS Central Software. An authenticated, local attacker can exploit this vulnerability to inject...
icmpsh - Simple Reverse ICMP Shell
Sometimes, network administrators make the penetration tester's life harder. Some of them do use firewalls for what they are meant to, surprisingly! Allowing traffic only onto known machines, ports and services ingress filtering and setting strong egress access control lists is one of these cases...
Cisco UCS Central Software Command-Line Interface Command Injection Vulnerability
A vulnerability in the command-line interface CLI of Cisco UCS Central Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An...