Fedora 22 : qemu-2.3.1-7.fc22 (2015-d5c1048b47)

CVE-2015-7295: virtio-net possible remote DoS bz 1264393 drive-mirror: Fix coroutine reentrance bz 1266936 Fix udp socket 'localaddr' bz 1268708 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Multiple Vulnerabilities in CubeCart

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in popular open source shopping software CubeCart. The discovered vulnerabilities allow a remote attacker to compromise vulnerable website and its databases, and conduct sophisticated attacks against its users. 1 SQL...

How I was in the Google collaboration community GWC found the reflection type, a storage type, the DOM type of vulnerability? - Vulnerability warning-the black bar safety net

! Google for Work Connect, the GWC is a System, Application Administrator, and partner community of system, but also in Google's vulnerability reward range. Shortly before, I was in the GWC community system found reflection type, a storage type, the DOM typeXSS. The storage typeXSS In the GWC...

Google Chrome Cleanup Tool DLL Hijacking

Hi @ll, Google's softwareremovaltool.exe alias Chrome Cleanup Tool loads and executes several DLLs from its "application directory" during runtime: Windows XP: SetupAPI.dll, NTMarta.dll, ClbCatQ.dll, SRClient.dll, UXTheme.dll, RASAPI32.dll, HNetCfg.dll, IPHlpAPI.dll, RASAdHlp.dll, XPSP2Res.dll,...

NetworkMiner 2.0 - Network Forensic Analysis Tool (NFAT)

NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows but also works in Linux / Mac OS X / FreeBSD. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the...

QEMU DoS

The vulnerability of the QEMU hardware emulation software is related to incorrect restrictions on commands received from ATAPI devices. Exploiting this vulnerability can allow a malicious actor to cause service failures or potentially have other unspecified effects by using certain IDE commands...

Mobile Drive Free 1.8 Local File Inclusion / File Upload

Document Title: =============== Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1708 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ====================================...

Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities

Document Title: =============== Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1708 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ====================================...

PT-2016-3339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition was found in the Linux kernel's implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default...

remote filename path traversal in curl tool for Windows

curl does not sanitize colons in a remote filename that is used as the local filename. This may lead to a vulnerability on systems where the colon is a special path character. Currently Windows is the only OS where this vulnerability applies. curl offers command line options --remote-name also...

ALERT: This New Ransomware Steals Passwords Before Encrypting Files

You should be very careful while visiting websites on the Internet because you could be hit by a new upgrade to the World's worst Exploit Kit – Angler, which lets hackers develop and conduct their own drive-by attacks on visitors' computers with relative ease. Many poorly-secured websites are...

多款NVIDIA GPU显卡驱动非引用Windows搜索路径漏洞

安装了nvidia的显卡驱动包后，在控制面板会有nvidia的图标，点击该图标会运行 nvSmartMaxApp.exe，并显示显卡配置界面。该主程序在加载其它子程序时，调用createprocessa API时，第一个参数没有使用双引号来闭合包含有空格的子进程路径。造成攻击者可以在C盘根目录下 存放c:\program.exe的恶意程序，并会被nvSmartMaxApp.exe加载。 但是在WIN7中默认C盘根目录是不能写的。同时该漏洞需要用户交互。...

Theme Test Drive <= 2.9 - Authenticated File Upload & XSS

The Theme Test Drive WordPress plugin was affected by an Authenticated File Upload & XSS security vulnerability...

WordPress Theme Test Drive Plugin <= 2.9 - Multiple Vulnerabilities

This plugin is prone to an authenticated file upload and cross site scripting vulnerabilities. Solution Update the plugin...

TECO JN5 L510-DriveLink 1.482 SEH Overwrite Buffer Overflow

!/usr/bin/perl TECO JN5 L510-DriveLink 1.482 SEH Overwrite Buffer Overflow Exploit Vendor: TECO Electric and Machinery Co., Ltd. Product web page: http://www.teco-group.eu Download: http://globalsa.teco.com.tw/supportdownload.aspx?KindID=9 Affected version: 1.482 and 1.462 Summary: JN5 DriveLink ...

TECO JN5 L510-DriveLink 1.482 - .lf5 Overwrite Buffer Overflow (SEH)

TECO JN5 L510-DriveLink 1.482 - .lf5 Overwrite Buffer Overflow SEH !/usr/bin/perl TECO JN5 L510-DriveLink 1.482 SEH Overwrite Buffer Overflow Exploit Vendor: TECO Electric and Machinery Co., Ltd. Product web page: http://www.teco-group.eu Download:...

TECO JN5 L510-DriveLink 1.482 SEH Overwrite Buffer Overflow Exploit

JN5 DriveLink is a free program that enables you to configure the AC Motor Drive, 510 Series PC-Link. It provides support for sleep and fire modes favourable for pumps, fans, compressors, and HVAC and communication network protocol of Modbus/ BACnet/ Metasys N2. The vulnerability is caused due to...

DEBIAN-CVE-2015-6855

hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WINREADNATIVEMAX command to an empty drive, which triggers a...

CVE-2007-0822

umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen drive that was mounted and then physically removed, which might allow the users to obtain sensiti...

Windows 10 pcap Drive Local Privilege Escalation

Source: https://github.com/Rootkitsmm/Win10Pcap-Exploit include include include include include include include include include define SLIOCTLGETEVENTNAME CTLCODE0x8000, 1, METHODNEITHER, FILEANYACCESS define STATUSSUCCESS NTSTATUS0x00000000L define STATUSINFOLENGTHMISMATCH NTSTATUS0xc0000004L /...