CVE-2016-4800

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

Android Pentesting Portable Integrated Environment: Appie

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...

JReFrameworker - Practical Managed Code Rootkits for Java

This project aims to extend the work done by Erez Metula in his book Managed Code Rootkits: Hooking into Runtime Environments. The work outlines a tool ReFrameworker that claims to be a framework modification tool capable of performing any modification task, however the tool falls short in...

SAML Raider - SAML2 Burp Extension

SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was created by Roland Bischofberger and Emanuel Duss during a bachelor thesis at the Hochschule für Technik...

Magnetrol HART DTM Vulnerability

OVERVIEW Alexander Bolshev of Digital Security has identified an improper input validation vulnerability in the CodeWrights GmbH HART Device Type Manager DTM library extension utilized by some Magnetrol products. CodeWrights GmbH has updated its software library to mitigate this vulnerability...

Oracle: Security Advisory (ELSA-2011-0568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Eclipse Help System (IEHS) Cross-Site Scripting Vulnerability

Exploit for windows platform in category remote exploits IBM Eclipse Help System IEHS Cross-Site Scripting Vulnerability + Author: Filippo Roncari + Target: IBM Eclipse Help System IEHS + Version: 6.1.0 = 6.1.0.6, 6.1.5 = 6.1.5.3, 7.0 = 7.0.0.2, 8.0 8.0.0.1 + Vendor: http://www.ibm.com +...

IBM Eclipse Help System (IEHS) Cross Site Scripting

IBM Eclipse Help System IEHS Cross-Site Scripting Vulnerability + Author: Filippo Roncari + Target: IBM Eclipse Help System IEHS + Version: 6.1.0 = 6.1.0.6, 6.1.5 = 6.1.5.3, 7.0 = 7.0.0.2, 8.0 8.0.0.1 + Vendor: http://www.ibm.com + Accessibility: Remote + Severity: Medium + CVE: CVE-2014-0917 +...

Eclipse Foundation Jetty Web Server HttpParser Remote Information Disclosure (CVE-2015-2080)

An information disclosure vulnerability exists in Eclipse Foundation Jetty Web Server. The vulnerability is due to improper parsing of HTTP requests that can lead to information disclosure via HTTP responses from the server. A remote attacker can exploit this vulnerability by sending HTTP request...

GDS Labs Alert [CVE-2015-2080] - JetLeak Vulnerability: Remote Leakage Of Shared Buffers In Jetty Web Server

GDS LABS ALERT: CVE-2015-2080 JetLeak Vulnerability Remote Leakage Of Shared Buffers In Jetty Web Server SYNOPSIS ======== Gotham Digital Science discovered a critical information leakage vulnerability in the Jetty web server that allows an unauthenticated remote attacker to read arbitrary data...

CVE-2 0 1 5-2 0 8 0 analysis-vulnerability warning-the black bar safety net

jetty is a very widely used java container, in the development of javaweb application when using jetty as an embedded container, debugging is very convenient. Many big Internet companies are using it to replace the tomcat, as far as I know, Ali inside the use of the jetty is also better than the...

Appie - Android Pentesting Portable Integrated Environment

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment.It is completely portable and can be carried on USB stick.This is a one stop answer for all the tools needed in Android Application Security Assessment. Difference between Appie and existing...

Fedora Update for eclipse-jgit FEDORA-2014-17341

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for eclipse-egit FEDORA-2014-17341

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : eclipse-egit-3.5.3-1.fc21 / eclipse-jgit-3.5.3-1.fc21 (2014-17341)

Fixes for CVE-2014-9390 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : subversion (openSUSE-SU-2014:1725-1)

This Apache Subversion update fixes the following security and non security issues. - Apache Subversion 1.8.11 - This release addresses two security issues: boo909935 - CVE-2014-3580: moddavsvn DoS from invalid REPORT requests. - CVE-2014-8108: moddavsvn DoS from use of invalid transaction names....

[SECURITY] Fedora 21 Update: eclipse-egit-3.5.3-1.fc21

The eclipse-egit package contains Eclipse plugins for interacting with Git repositories...

Eclipse BIRT 2.2.1 'run?__report' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36674/info Eclipse BIRT Business Intelligence and Reporting Tools is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

OpenLDAP <= 2.4.3 (KBIND) Remote Buffer Overflow Exploit

No description provided by source. / openldap-kbind-p00f.c - OpenLDAP kbind remote exploit Only works on servers compiled with --enable-kbind enable LDAPv2+ Kerberos IV bind deprecated no by Solar Eclipse [email protected] Shoutouts to LSD for their l33t asm code and to all 0dd people...

MS Windows ASN.1 - Remote Exploit (MS04-007)

No description provided by source. Microsoft ASN.1 remote exploit for CVE-2005-1935 // MS04-007 Solar Eclipse solareclipse at phreedom dot org http://www.exploit-db.com/sploits/12262006-killbill.tar.gz milw0rm.com 2004-03-26...