9229 matches found
h2o -- heap buffer overflow during logging
Marlies Ruck reports: Fix heap buffer overflow while trying to emit access log - see references for full details. CVE-2018-0608: Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service DoS via unspecified vectors...
ReverseAPK - Quickly Analyze And Reverse Engineer Android Packages
Quickly analyze and reverse engineer Android applications. FEATURES: Displays all extracted files for easy reference Automatically decompile APK files to Java and Smali format Analyze AndroidManifest.xml for common vulnerabilities and behavior Static source code analysis for common vulnerabilitie...
CVE-2018-11577
Liblouis 3.5.0 has a Segmentation fault in loulogPrint in logging.c...
Liblouis Segmentation Error Vulnerability
Liblouis is an open-source Braille translator written in C. It is a very easy to use and easy to use. A security vulnerability exists in the loulogPrint of the logging.c file in Liblouis version 3.5.0. No details of the vulnerability are provided at this time...
CVE-2018-11577
Liblouis 3.5.0 has a Segmentation fault in loulogPrint in logging.c...
CVE-2018-11577
Liblouis 3.5.0 has a Segmentation fault in loulogPrint in logging.c...
CentOS 7 : 389-ds-base (CESA-2018:1380)
An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
CVE-2018-11567
Prior to 2018-04-27, the reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill. The reprompt feature is designed so that if Alexa does not receive an input within 8 seconds, the device can speak a reprompt, then wait an additional 8 seconds for input; if the user still...
librelp security update
CentOS Errata and Security Advisory CESA-2018:1223 An update for librelp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
PT-2018-10673 · Amazon · Alexa +1
Name of the Vulnerable Software and Affected Versions: Amazon Echo devices affected versions not specified Description: The reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill, allowing an attacker to obtain transcripts of speech not intended for Alexa to process. Thi...
OPENSUSE-SU-2018:1462-1 Security update for pdns
pdns was updated to 4.1.2. Security fixes: Dnsreplay: bail out on a too small outgoing buffer CVE-2018-1046 bsc1092540 Improvements: API: increase serial after dnssec related updates Auth: lower ‘packet too short’ loglevel Make check-zone error on rows that have content but shouldn’t Auth: avoid ...
CVE-2018-1075
A flaw was found in ovirt-engine. When engine-setup was run and one chooses to provision the database manually or connect to a remote database, the password input was logged in cleartext during the verification step. Sharing the provisioning log might inadvertently leak database passwords...
Werewolf Online 0.8.8 - Information Disclosure Vulnerability
Exploit for Android platform in category local exploits Exploit Title: Werewolf Online 0.8.8 - Insecure Logging Software Link: https://play.google.com/store/apps/details?id=com.werewolfapps.online Download Link:...
Windows Defender Firewall: Log successful connections
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilelogsuccesspackets.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Log successful connections Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
Werewolf Online 0.8.8 - Information Disclosure
Werewolf Online 0.8.8 - Information Disclosure Exploit Title: Werewolf Online 0.8.8 - Insecure Logging Date: 2018-05-24 Software Link: https://play.google.com/store/apps/details?id=com.werewolfapps.online Download Link:...
Werewolf Online 0.8.8 - Information Disclosure
Exploit Title: Werewolf Online 0.8.8 - Insecure Logging Date: 2018-05-24 Software Link: https://play.google.com/store/apps/details?id=com.werewolfapps.online Download Link: https://apkpure.com/werewolf-online-unreleased/com.werewolfapps.online/download?from=details Exploit Author: ManhNho Version...
Werewolf Online 0.8.8 Information Disclosure
Exploit Title: Werewolf Online 0.8.8 - Insecure Logging Date: 2018-05-24 Software Link: https://play.google.com/store/apps/details?id=com.werewolfapps.online Download Link: https://apkpure.com/werewolf-online-unreleased/com.werewolfapps.online/download?from=details Exploit Author: ManhNho Version...
Open Source Deception Framework: DejaVU
Deception techniques if deployed well can be very effective for organizations to improve network defense and can be a useful arsenal for blue teams to detect attacks at very early stage of cyber kill chain. But the challenge we have seen is deploying, managing and administering decoys across larg...
Windows Packer Project for Defenders: DARKSURGEON
Darksurgeon is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense. Darksurgeon has three stated goals: Accelerate incident response, digital forensics, malware analysis, and network defense with a preconfigured Windows 10 environment...