Lucene search
+L

9576 matches found

Kitploit
Kitploit
added 2016/09/20 9:42 p.m.25 views

MorphAES - IDPS & SandBox & AntiVirus STEALTH KILLER

MorphAES is the world's first polymorphic shellcode/malware engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent. Properties: Polymorphism AES encryption Metamorphism logic and constant...

7.8AI score
SaveExploits0References1
CNVD
CNVD
added 2016/09/19 12:0 a.m.5 views

Crypto++ Information Disclosure Vulnerability

Crypto++ aka cryptopp is a free C++ library. A security vulnerability exists in Crypto++ 5.6.4 and earlier versions, which can be exploited by an attacker to obtain sensitive information by accessing process memory...

5.9CVSS6.5AI score0.02288EPSS
SaveExploits0References1
OSV
OSV
added 2016/09/16 5:59 a.m.4 views

DEBIAN-CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

5.9CVSS6.5AI score0.02288EPSS
SaveExploits0References1
OSV
OSV
added 2016/09/16 5:59 a.m.8 views

CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

5.9CVSS5.5AI score
SaveExploits0References8
NVD
NVD
added 2016/09/16 5:59 a.m.12 views

CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

5.9CVSS5.4AI score0.02288EPSS
SaveExploits0References8
OSV
OSV
added 2016/09/16 5:59 a.m.5 views

UBUNTU-CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

5.9CVSS6.6AI score0.02288EPSS
SaveExploits0References6
Prion
Prion
added 2016/09/16 5:59 a.m.13 views

Design/Logic Flaw

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

4.3CVSS6.4AI score0.02288EPSS
SaveExploits0References7Affected Software1
UbuntuCve
UbuntuCve
added 2016/09/16 5:59 a.m.25 views

CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

5.9CVSS6.6AI score0.02288EPSS
SaveExploits0References5
CVE
CVE
added 2016/09/16 12:0 a.m.55 views

CVE-2016-7420

Crypto++ (cryptopp) up to version 5.6.4 is vulnerable to information disclosure due to missing documentation of the NDEBUG compile-time switch to disable asserts, enabling context-dependent attackers to access sensitive data from process memory after an assertion failure (e.g., core dumps). Upstr...

5.9CVSS6.1AI score0.02288EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2016/09/16 12:0 a.m.27 views

CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

5.7AI score0.02288EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2016/09/16 12:0 a.m.58 views

CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

5.9CVSS5.8AI score0.02288EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2016/09/15 12:0 a.m.21 views

Cisco Small Business RV Series Confidential Information Decryption Man-in-the-Middle Vulnerability

A vulnerability in the cryptographic implementation of the RV320 Dual Gigabit WAN VPN Router and the RV325 Dual Gigabit WAN VPN Router could allow an unauthenticated, remote attacker to make use of hard-coded certificate and keys embedded within the firmware of the affected device. Copyright C 20...

5.9CVSS6.3AI score0.01305EPSS
SaveExploits0References1
Fedora
Fedora
added 2016/09/07 1:52 a.m.30 views

[SECURITY] Fedora 23 Update: libgcrypt-1.6.6-1.fc23

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

5.3CVSS2.5AI score0.03597EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2016/09/06 12:0 p.m.7 views

abstract-boot (>=0.2.0-beta.4 <=0.2.0-beta.7), ace-test-lib (=0.1.0) +711 more potentially affected by unknown CVE via rust-crypto (=0.2.36)

rust-crypto CARGO version =0.2.36 is affected by a known vulnerability. The following packages have a transitive dependency on rust-crypto and may be impacted: - abstract-boot =0.2.0-beta.4, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0, =0.8.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more...

5.5AI score
SaveExploits0
OSV
OSV
added 2016/09/06 12:0 p.m.20 views

RUSTSEC-2016-0005 rust-crypto is unmaintained; switch to a modern alternative

The rust-crypto crate has not seen a release or GitHub commit since 2016, and its author is unresponsive. NOTE: The old rust-crypto crate with hyphen should not be confused with similarly named new RustCrypto GitHub Org without hyphen. The GitHub Org is actively maintained. We recommend you switc...

7AI score
SaveExploits0References3
RustSec
RustSec
added 2016/09/06 12:0 p.m.25 views

rust-crypto is unmaintained; switch to a modern alternative

The rust-crypto crate has not seen a release or GitHub commit since 2016, and its author is unresponsive. NOTE: The old rust-crypto crate with hyphen should not be confused with similarly named new RustCrypto GitHub Org without hyphen. The GitHub Org is actively maintained. We recommend you switc...

1.3AI score
SaveExploits0Affected Software1
Fedora
Fedora
added 2016/08/27 11:9 a.m.30 views

[SECURITY] Fedora 25 Update: libgcrypt-1.6.6-1.fc25

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

5.3CVSS2.5AI score0.03597EPSS
SaveExploits0
Fedora
Fedora
added 2016/08/20 9:53 p.m.15 views

[SECURITY] Fedora 24 Update: libgcrypt-1.6.6-1.fc24

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

2.5AI score
SaveExploits0
ThreatPost
ThreatPost
added 2016/08/19 12:57 p.m.9 views

Multiple Vulnerabilities Identified in 'Utterly Broken' BHU Routers

Researchers have identified a router so fraught with vulnerabilities and so “utterly broken” that it can be exploited to do pretty much anything. An attacker could bypass its authentication, peruse sensitive information stored in the router’s system logs and even use the device to execute OS...

0.3AI score
SaveExploits0References3
ThreatPost
ThreatPost
added 2016/08/18 12:39 p.m.50 views

GPG Patches 18-Year-Old Libgcrypt RNG Bug

New versions of Libgcrypt and Gnu Privacy Guard GnuPG or GPG released on Wednesday include security fixes for vulnerabilities discovered in the mixing functions of the Libgcrypt random number generator. The flaws were privately disclosed by Felix Dörre and Vladimir Klebanov of Karlsruhe Institute...

4.3CVSS6.7AI score0.03438EPSS
SaveExploits0References3
Rows per page
Query Builder