Mimikittenz - Post-Exploitation Powershell Tool for Extracting Juicy info from Memory

mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes using regex patterns including but no...

GDB Front End: PINCE

GDB Front End: PINCE is not Cheat Engine PINCE is a front-end/reverse engineering tool for the GNU Project Debugger GDB, focused on games. But it can be used for any reverse-engineering related stuff. PINCE is an abbreviation for “PINCE is not Cheat Engine”. PINCE’s GUI is heavily “inspired;D” by...

Multiple Generic Vulnerabilities in the Special Equipment Inspection Management System of Tronda Electronics Co.

Tronda Electronics Co., Ltd. is a business dealing in camera accessories. A file read and SQL injection vulnerability exists in the Special Equipment Inspection Management System of Tronda Electronics Ltd. Allows attackers to utilize common SQL injection tools to obtain sensitive database...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.

Special Equipment Inspection Management System of Fuzhou Chuangda Electronics Co., Ltd. is a data and information management system. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection and management system: /jy/util/areaadmin.jsp?supform=froms&supaid=area&supcd=DQDM&supnm=area&csh...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06022)

Fuzhou Tranda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system is a data information management...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06026)

Special Equipment Inspection Management System of Fuzhou Chuangda Electronics Co., Ltd. is a data and information management system. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system jy/bglskAction.do?task=edit&YWLSH=000038 page there is a SQL injection...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06021)

Fuzhou Tranda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system is a data information management...

Arbitrary File Download Vulnerability in Special Equipment Inspection and Management System of Fuzhou Chuangda Electronics Co.

Special Equipment Inspection Management System of Fuzhou Chuangda Electronics Co., Ltd. is a data and information management system. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system there are arbitrary file download vulnerability, an attacker can download the...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06025)

Fuzhou Chuangda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system/jy/util/selectryone.jsp?ryqx=1...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tronda Electronics Co.(CNVD-2016-06019)

Fuzhou Tranda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system is a data information management...

Trend Micro - Multiple HTTP Problems with CoreServiceShell.exe

Exploit for windows platform in category web applications Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=775 The main component of Trend Micro Antivirus is CoreServiceShell.exe, which runs as NT AUTHORITY\SYSTEM. The CoreServiceShell includes an HTTP daemon, which is used for...

CVE-2016-1369

The Adaptive Security Appliance ASA 5585-X FirePOWER Security Services Processor SSP module for Cisco ASA with FirePOWER Services 5.3.1 through 6.0.0 misconfigures kernel logging, which allows remote attackers to cause a denial of service resource consumption, and inspection outage or module outa...

Threat Outbreak Alert RuleID22526: Email Messages Distributing Malicious Software on April 28, 2016

Medium Alert ID: 44888 First Published: 2016 April 28 16:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22526 may contain the following files: Name | Si...

لاسلكي الشرطة - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application لاسلكي الشرطة published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 24 Update: seamonkey-2.40-1.fc24

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

[SECURITY] Fedora 22 Update: seamonkey-2.40-1.fc22

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

[SECURITY] Fedora 23 Update: seamonkey-2.40-1.fc23

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

Suspicious HTTPS Gmail Mail Attachment Containing JavaScript Code

Many phishing campaigns are known to use mail attachments containing JavaScript code. A remote attacker could send e-mails including such files and convince users to manually trigger their execution. This would allow the malicious code to run and infect the target system. This method is often use...

Cisco ASA 5500 Content Security and Control Security Services Module Denial of Service Vulnerability

The Cisco ASA 5500 is an X-Series next-generation firewall security appliance from Cisco, Inc.The Content Security and Control Security Services Module CSC-SSM is one of the content security and control security services modules. A security vulnerability exists in the HTTPS inspection engine in...

Design/Logic Flaw

The HTTPS inspection engine in the Content Security and Control Security Services Module CSC-SSM 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers to cause a denial of service memory consumption or device reload via a flood of HTTPS packets, aka Bug ID CSCue76147...