313 matches found
GReAT thoughts: Awesome IDA Pro plugins
The Global Research & Analysis Team here at Kaspersky has a tradition of meeting up once a month and sharing cutting-edge research, interesting techniques and useful tools. We recently took the unprecedented decision to make our internal meetings public for a few months and present them as a seri...
CVE-2014-1867
suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...
Security feature bypass
suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...
CVE-2014-1867
suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...
CVE-2014-1867
suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...
CVE-2014-1867: Improper Authentication
suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...
PT-2019-7079
Name of the Vulnerable Software and Affected Versions suPHP versions prior to 0.7.2 Description The issue allows for security bypass, potentially leading to arbitrary code execution due to a problem in the source-highlighting feature. Recommendations For versions prior to 0.7.2, update to version...
WordPress crayon-syntax-highlighter plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. crayon-syntax-highlighter is used in one of the syntax highlighting plugin built using PHP and jQuery. A cross-site scripting...
[SECURITY] [DSA 4467-2] vim regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-4467-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 23, 2019 https://www.debian.org/security/faq -...
openSUSE Security Update : cgit (openSUSE-2019-595)
This update for cgit fixes the following issues : The following security vulnerability was addressed : - CVE-2018-14912: Fixed a directory traversal vulnerability, when enable-http-clone=1 is not turned off boo1103799 The following other changes were made : - Update to upstream release 1.2.1 -...
Fedora 29 : python-markdown2 (2019-095c760511)
python-markdown2 2.3.7 - pull 306 Drop support for legacy Python versions - pull 307 Fix syntax highlighting test cases that depend on Pygments output - pull 308 Add support for Python 3.7 - pull 304 Add Wheel package support - pull 312 Fix tocdepth initialization regression - pull 315 XSS fix No...
Fedora 28 : python-markdown2 (2019-a16e1127d3)
python-markdown2 2.3.7 - pull 306 Drop support for legacy Python versions - pull 307 Fix syntax highlighting test cases that depend on Pygments output - pull 308 Add support for Python 3.7 - pull 304 Add Wheel package support - pull 312 Fix tocdepth initialization regression - pull 315 XSS fix No...
dnSpy - .NET Debugger And Assembly Editor
dnSpy is a debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available. Want to say thanks? Click the star at the top of the page. Or fork dnSpy and send a PR! The following pictures show dnSpy in action. It shows dnSpy editing a...
Vba2Graph - Generate Call Graphs From VBA Code, For Easier Analysis Of Malicious Documents
A tool for security researchers, who waste their time analyzing malicious Office macros. Generates a VBA call graph, with potential malicious keywords highlighted. Allows for quick analysis of malicous macros, and easy understanding of the execution flow. @MalwareCantFly Features Keyword...
CyberChef - The Cyber Swiss Army Knife [A Web App For Encryption, Encoding, Compression And Data Analysis]
The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression an...
openSUSE Security Update : cgit (openSUSE-2018-864)
This update for cgit to version 1.2.1 fixes the following issues : The following security vulnerability was addressed : - CVE-2018-14912: Fixed a directory traversal vulnerability, when enable-http-clone=1 is not turned off boo1103799 The following other changes were made : - Update to upstream...
Security update for cgit (moderate)
This update for cgit to version 1.2.1 fixes the following issues: The following security vulnerability was addressed: - CVE-2018-14912: Fixed a directory traversal vulnerability, when enable-http-clone=1 is not turned off boo1103799 The following other changes were made: - Update to upstream...
Security update for cgit (moderate)
This update for cgit fixes the following issues: The following security vulnerability was addressed: - CVE-2018-14912: Fixed a directory traversal vulnerability, when enable-http-clone=1 is not turned off boo1103799 The following other changes were made: - Update to upstream release 1.2.1...