4348 matches found
Yahoo in China suffered a SSL man in the middle attacks-vulnerability warning-the black bar safety net
Latest update: Off 1 0 on 2 0 PM 1 6: 4 to 6 points, attacks still continue......... 2 0 1 4 years 1 0 month 2 0 Day 1 4:3 0, Yahoo in mainland China once again under SSL man in the middle attacks, the domestic three operators to access all there is a problem, and Hong Kong, the United States,...
libX11: Multiple integer overflows leading to heap-based buffer-overflows
Multiple integer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XQueryFont, 2 XF86BigfontQueryFont, 3 XListFontsWithInfo, 4 XGetMotionEvents, 5 XListHosts, 6...
ASProxy <= 5.5.0 Arbitrary File Download Vulnerability
Exploit for asp platform in category web applications PoC: http://host/surf.aspx?dec=1&url=Base64code Enter URL: file:///C:/windows/system32/cmd.exe file:///C:/windows/system32/drivers/etc/hosts file:///C:/Program Files/Internet Explorer/iexplore.exe ...any other path 0day.today 2018-04-03...
Linux/x86 - Add map in /etc/hosts file
Linux/x86 - Add map in /etc/hosts file. Shellcode exploit for linx86 platform / ;modifyhosts.asm ;this program add a new entry in hosts file pointing google.com to 127.1.1.1 ;author Javier Tejedor ;date 24/09/2014 global start section .text start: xor ecx, ecx mul ecx mov al, 0x5 push ecx push...
Apache mod_cgi Bash Environment Variable Injection (Shellshock) Scanner
This module scans for the Shellshock vulnerability, a flaw in how the Bash shell handles external environment variables. This module targets CGI scripts in the Apache web server by setting the HTTPUSERAGENT environment variable to a malicious function definition. PROTIP: Use exploit/multi/handler...
Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS
The 1 power and 2 ipmiboot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service memory consumption via unspecified input that is converted to a symbol...
security/ossec-hids-* -- root escalation via temp files
OSSEC reports: This correction will create the temp file for the hosts deny file in /var/ossec and will use mktemp where available to create NON-predictable temp file name. In cases where mktemp is not available we have written a BAD version of mktemp, but should be a little better then just...
Java.com, TMZ Serving Malvertising Redirects to Angler Kit
Online ad network AppNexus has again been identified at the core of another malvertising campaign using the Angler Exploit Kit to redirect visitors to sites hosting the Asprox malware. Busy, popular websites including TMZ, Photobucket and Java.com in recent days have been serving malicious...
Fake AV Defru Puts New Spin on Rogue AV
Rogue antivirus was once the scourge of the Internet, and while this sort of malware is not entirely extinct, it’s fallen out of favor among criminals as users have become more aware and security products have gotten better at blocking the threat. Image via TechNet However, Daniel Chipiristeanu, ...
Adobe Acrobat < 10.1.11 / 11.0.08 Sandbox Bypass (APSB14-19)
The version of Adobe Acrobat installed on the remote host is a version prior to 10.1.11 / 11.0.08. It is, therefore, affected by a sandbox bypass flaw which can allow an attacker to run arbitrary code with escalated privileges on Windows hosts. Note that Nessus has not tested for this issue but h...
ansible -- multiple vulnerabilities
Ansible, Inc. reports: Arbitrary execution from data from compromised remote hosts or local data when using a legacy Ansible syntax - resolved in Ansible 1.7 ansible-galaxy command when used on local tarballs and not galaxy.ansible.com can install a malformed tarball if so provided - resolved in...
DoS via fail2ban
Invalid logs parsing allows to ban arbitrary hosts...
DSA-2979-1 fail2ban - security update
Bulletin has no description...
Apache 1.3.x - 2.0.48 - mod_userdir Remote Users Disclosure Exploit
No description provided by source. / m00-apache-w00t.c Apache 1.3.-2.0.48 remote users disclosure exploit by m00 Security. Proof-of-Concept edition This tool scans remote hosts with httpd apache and disclosure information about existens users accounts via wrong default configuration of moduserdir...
Microsoft Internet Explorer 5 JavaScript Local File Enumeration Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the document it is embedded in and the file...
cgiCentral WebStore 400 Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2861/info cgiCentral's Webstore is an shopping cart application which processes and manages online purchases. Wsmail.cgi calls system with user-supplied data in the command string. Because it does not filter metacharacter...
Microsoft Windows Media Player 11 ScriptCommand Multiple Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35335/info Microsoft Windows Media Player is prone to multiple information-disclosure vulnerabilities because it fails to properly restrict access to certain functionality when handling media files. An attacker can exploi...
BindView HackerShield 1.0/1.1 HackerShield AgentAdmin Password Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/628/info The BindView HackerShield product originally Netect's HackerShield creates an NT service account called NetectAgentAdmin$. This account is a member of the local administrators group on an NT host. The service...
Sun Management Center 3.0/3.5 Error Message Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8873/info A problem in the handling of error messages has been identified in Sun Management Center. Because of this, an attacker may be able to gain sensitive information about vulnerable hosts...
Acme.Serve 1.7 - Arbitrary File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2809/info Acme.Serve is a free, open-source, embeddable webserver written in Java. It is small, is intended to provide minimal functionality, and is fully compatible with JavaServer. Acme.Serve 1.7 comes with a webserver...