CVE-2014-3671

creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-10-01...

Bash Environment Variables Code Injection Exploit

Exploit for linux platform in category remote exploits...

CVE-2014-7910

creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-10-01...

SUSE-RU-2015:0621-1 Security update for Linux kernel

The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix various bugs and security issues. The following security bugs have been fixed: CVE-2014-1739: The mediadeviceenumentities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a...

Apple TV < 7 Multiple Vulnerabilities

According to its banner, the remote Apple TV device is a version prior to 7. It is, therefore, affected by multiple vulnerabilities, the most serious of which can result in arbitrary code execution. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid77822;...

Immunity Canvas: ESET_EPFWNDIS

Name| ESETEpFwNDIS ---|--- CVE| CVE-2014-4973 Exploit Pack| CANVAS Description| EpFwNDIS.sys Trusted Value Vulnerability Notes| Repeatability: Infinite Notes: This module exploits a vulnerability on the ESET Personal Firewall NDIS filter EpFwNdis.sys driver. The Firewall Module Build 1183 2014021...

How to Detect SQL Injection Attacks

SQL Injection SQLi attacks have been around for over a decade. You might wonder why they are still so prevalent. The main reason is that they still work on quite a few web application targets. In fact, according to Veracode’s 2014 State of Security Software Report , SQL injection vulnerabilities...

Full TrustZone

A vulnerability in a modified kernel means that a series of exploits can be used to obtain access to the Trusted Execution Environment...

Two recent IBM DB2 LUW vulnerability to mention the right analysis-vulnerability warning-the black bar safety net

IBM recently released two affected DB2 for linux, unix, windows, three versions of the security vulnerability patches. And this article will explore where these two vulnerabilities, CVE-2 0 1 4-0 9 0 7 and CVE-2 0 1 3-6 7 4 4 some of the technical details to help database administrators assess...

DVWA Cross Site Request Forgery

//document.getElementById"loader".innerHTML = 'Loading...'; var one = "createdb":'whatever'; var two = "username":"admin","password":"password","Login":"Login"; var three = "security":"low","seclevsubmit":"Submit"; //windows opens calculator; change this to whatever your desire var four =...

'Kyle and Stan' Malvertising Network Targets Windows and Mac Users

A malvertising network that has been operating since at least May has been able to place malicious ads on a number of high-profile sites, including Amazon and YouTube and serves a unique piece of malware to each victim. The network, dubbed Kyle and Stan by the Cisco researchers who analyzed its...

GLSA-201408-18 : NRPE: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201408-18 NRPE: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in NRPE. Please review the CVE identifiers referenced below for details. Impact : A remote attacker can utilize multiple vectors to execute...

SAP Kernel - RCE, DoS

Application: SAP NetWeaver Dispatcher Versions Affected: SAP Kernel 7.00 32BIT, 7.40 64BIT Vendor URL: http://www.sap.com Bugs: Buffer Overflow – RCE, DoS Exploits: YES Reported: 25.08.2014 Vendor response: 25.08.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2059734 Author...

SAP Kernel - RCE and DoS vulnerability

Application: SAP NetWeaver Dispatcher Versions Affected: SAP Kernel 7.00 32BIT, 7.40 64BIT Vendor URL: http://www.sap.com Vulnerability: Buffer Overflow – RCE, Denial of Service Exploits: YES Reported: 25.08.2014 Vendor response: 25.08.2014 Date of Public Advisory: 15.12.2014 Reference: SAP...

CMS Agencija O2 Cross Site Scripting / SQL Injection Vulnerabilities

CMS Agencija O2 suffers from cross site scripting and remote SQL injection vulnerabilities. SQL Injection & XSS on CMS Agencija O2 Risk: High CWE number: CWE-89,CWE-79 Date: 22/08/2014 Vendor: Agencija O2 Author: Felipe " Renzi " Gabriel Contact: email protected Tested on: Windows 8 pro & Linux...

MGASA-2014-0330 Updated kernel-linus package fixes security vulnerabilities

Updated kernel-linus provides upstream 3.10.51 kernel and fixes the following security issues: Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...

MGASA-2014-0337 Updated kernel-tmb package fixes security vulnerabilities

Updated kernel-tmb provides upstream 3.12.26 kernel and fixes the following security issues: Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value CVE-2014-020...

Adobe Releases Critical Security Updates for Flash Player, Acrobat and Adobe Reader

Adobe has released security updates to fix seven vulnerabilities in its Flash and Air platforms and one in its Reader and Acrobat which, according to the company, is being exploited by attackers in wild "...in limited, isolated attacks targeting Adobe Reader users on Windows." The vulnerabilities...

MS KB2982794: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB2982794. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exits that allows code execution. CVE-2014-0538 - An unspecified security bypass error exists. CVE-2014-0541 - Multiple errors exist related to memory leaks that can be use...

Embedded Device Security, BadUSB, Car Hacking at Black Hat

LAS VEGAS — At the risk of diving headfirst into the Internet of Things fray, embedded device security emerged as a shiny new penny during last week’s Black Hat and DEF CON festivities. Firmware is the new hacker black, and everything from USB sticks, to home routers, to automobiles is in play fo...