CVE-2016-5119

CVE-2016-5119 affects KeePass 2 (2.33 and earlier). The vulnerability arises in the automatic update feature, where a MITM attacker can spoof the version check response and supply a crafted update, allowing arbitrary code execution on the affected system. The issue is exploited via the update mec...

CVE-2016-5119

The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response and supplying a crafted update...

KLA11362 ACE vulnerability in KeePass

Unspecified vulnerability was found in KeePass . Malicious users can exploit this vulnerability remotely via spoofing the version check response and supplying a crafted update to execute arbitrary code. Original advisories - Related products KeePass-Password-Safe CVE list CVE-2016-5119 high...

Fedora 25 : keepass (2016-125ea34ff9)

Update to version 2.34. Security fix for CVE-2016-5119. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

[SECURITY] Fedora 25 Update: keepass-2.34-1.fc25

KeePass is a free open source password manager, which helps you to remember your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. You only have to remember one single master password or select the key file to unlock the...

KeePass Malicious Redirect Vulnerability

KeePass is an open source, free, cross-platform password management tool. KeePass has a redirection vulnerability that allows attackers to construct malicious URIs, trick users into parsing them, and redirect users to arbitrary WEB sites for phishing attacks...

Fedora 22 : keepass-2.30-2.fc22 (2015-703a7aad00)

Update to version 2.30. - It's no-longer possible to enable the option to lock on laptop suspend. Previosuly you could enable it but it didn't work. - Avoid displaying duplicate icons in Gnome shell. Note that Tenable Network Security has extracted the preceding description block directly from...

KeePass Password Safe Classic 1.29 - Crash

1 . run python code : python crash.py 2 . open “KeePass” 3 . File — New Create New Password Database 4 . File — Import — CSV File… 5 . open r3z4.csv 6 . Right Click on “R3Z4” username and edit 7 . Crashed crash.py: !/usr/bin/env python hdr = '"' start syntax hcr = "R3Z4" user oth = ',"' user oth2...

KeePass Password Safe Classic 1.29 - Crash (PoC)

Exploit for windows platform in category dos / poc Title : KeePass Password Safe Classic 1.29 - Crash Proof Of Concept Affected Versions: All Version Founder : keepass.info Tested on Windows 7 / Server 2008 Download Link :...

KeePass Password Safe Classic 1.29 - Crash (PoC)

Title : KeePass Password Safe Classic 1.29 - Crash Proof Of Concept Affected Versions: All Version Founder : keepass.info Tested on Windows 7 / Server 2008 Download Link : http://sourceforge.net/projects/keepass/files/KeePass%201.x/1.30/KeePass-1.30.zip Author : Mohammad Reza Espargham Linkedin :...

KeePass Password Safe Classic 1.29 - Crash (PoC)

KeePass Password Safe Classic 1.29 - Crash PoC Title : KeePass Password Safe Classic 1.29 - Crash Proof Of Concept Affected Versions: All Version Founder : keepass.info Tested on Windows 7 / Server 2008 Download Link :...

KeePass Password Safe Classic 1.29 Buffer Overflow

Title : KeePass Password Safe Classic 1.29 - Crash Proof Of Concept Affected Versions: All Version Founder : keepass.info Tested on Windows 7 / Server 2008 Download Link : http://sourceforge.net/projects/keepass/files/KeePass%201.x/1.30/KeePass-1.30.zip Author : Mohammad Reza Espargham Linkedin :...

Fedora Update for keepass FEDORA-2015-703

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: keepass-2.30-2.fc22

KeePass is a free open source password manager, which helps you to remember your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. You only have to remember one single master password or select the key file to unlock the...

KeeFarce - Extracts Passwords From A Keepass 2.X Database, Directly From Memory

KeeFarce allows for the extraction of KeePass 2.x password database information from memory. The cleartext information, including usernames, passwords, notes and url's are dumped into a CSV file in %AppData% General Design KeeFarce uses DLL injection to execute code within the context of a runnin...

Fedora 23 : keepass-2.30-2.fc23 (2015-13095)

Update to KeePass 2.30. Add workaround for missing dependency on libgdiplus.so with Mono 4. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] Fedora 23 Update: keepass-2.30-2.fc23

KeePass is a free open source password manager, which helps you to remember your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. You only have to remember one single master password or select the key file to unlock the...

Citadel Variant Targets Password Managers

The Citadel Trojan has once again branched out beyond its roots as banking malware and is now targeting the master passwords guarding major password management products. Researchers from IBM Trusteer today said they’ve notified makers of the nexus Personal Security Client, Password Safe and KeePa...

CVE-2010-5196

Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file. NOTE: some of these details are obtained from third party...

CVE-2010-5200

Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file. NOTE: some of these details are obtained from third party information...