ShadowBrokers Planning Monthly Exploit, Data Dump Service

Popcorn in hand, the ShadowBrokers say they’re taking in the WannaCry outbreak from the sidelines before starting in June a subscription service for new exploits and stolen data akin to a wine of the month club. In what’s become a signature periodic rant from the unknowns behind the leak of...

CVE-2016-7761

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "WiFi" component, which allows local users to obtain sensitive network-configuration information by leveraging global storage...

HP Printers Wi-Fi Unauthorized Access Vulnerability

HP Printers Wi-Fi is a WiFi direct connect printer from Hewlett-Packard HP USA. An unauthorized access vulnerability exists in HP Printers WiFi Direct, which also affects printers of the same model with a public IP. The vulnerability can be exploited to obtain information about the printer's...

F5 BIG-IP systems denial of service vulnerability

F5 BIG-IP LTM, etc. are products of F5 Corporation, USA. ltm is a local traffic manager; APM is a set of solutions that provide secure and unified access to business-critical applications and networks. virtual server is one of the virtual server software components. A security vulnerability exist...

Debian Security Advisory DSA 3749-1 (dcmtk - security update)

Gjoko Krstic of Zero Science Labs discovered that dcmtk, a collection of libraries implementing the DICOM standard, did not properly handle the size of data received from the network. This could lead to denial-of-service via application crash or arbitrary code execution. OpenVAS Vulnerability Tes...

Security Bulletin: ASN. 1 coding in the presence of a heap memory corruption vulnerability-vulnerability warning-the black bar safety net

! ! 1. Security Bulletin information Title: Objective system integrated Co., Ltd. The design of the ASN. 1 coding specification in the presence of one can lead to heap memory corruption vulnerabilities. Vulnerability CVE number: CVE-2 0 1 6-5 0 8 0 Announcement of the URL address:...

Microsoft Windows RPC Network Data Representation Engine Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows, which results from a program failing to properly free memory. A remote attacker could exploit the vulnerability by means of a special...

CVE-2016-0178

The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles free operations, which allows remote attackers to execute arbitrary code via malformed RPC...

RPC Network Data Representation Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way Microsoft Windows handles specially crafted Remote Procedure Call RPC requests. The remote code execution can occur when the RPC Network Data Representation NDR Engine improperly frees memory. An authenticated attacker who successfully...

KLA11914 Multiple vulnerability in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

The vulnerability of the Solaris operating system, which allows a hacker to modify data

The vulnerability of the NDMP Backup Service component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability could allow an attacker, operating locally, to gain access to modify, add, or delete data...

Solaris NDMP Backup Service Component Data Modification Vulnerability

Solaris is a unix-based operating system. An unspecified vulnerability in the Solaris NDMP Backup Service component allows attackers to exploit the vulnerability to make unauthorized changes to data...

CVE-2015-7932

Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network...

Janitza UMG Information Disclosure Vulnerability

The Janitza UMG is an online power quality monitor for the energy industry from Janitza Germany. An information disclosure vulnerability exists in Janitza UMG 508, 509, 511, 604, 605. It allows remote attackers to obtain sensitive network connection information by requesting to UDP port 1234 or...

UBUNTU-CVE-2015-5825

WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote attackers to obtain sensitive information about the browser history, mouse movement, or network traffic via crafted JavaScript code...

Microsoft XML Core Services Man-in-the-Middle Information Disclosure Vulnerability

Microsoft XML Core Services MSXML is the United States Microsoft Microsoft company's set of services including SDK software development kit, which is mainly used for the implementation or development of applications designed by XML. An information disclosure vulnerability exists in Microsoft XML...

Cisco Unified IP Phones 9900 Series Information Disclosure Vulnerability

Cisco Unified IP Phone 9900 is a 9900 series IP phone terminal equipment from Cisco USA. The device provides voice, video, and other features. A security vulnerability exists in the mobility extension of the Cisco Unified IP Phone 9900 Series. A remote attacker could exploit this vulnerability to...

CVE-2014-8533

McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection...

CVE-2014-8532

Unspecified vulnerability in McAfee Network Data Loss Prevention before NDLP before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting...

CVE-2014-8523

Cross-site request forgery CSRF vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...