Updated xstream packages fix security vulnerability

A vulnerability was found in XStream. Parsing a maliciously crafted file could cause the application to crash. The processed stream at unmarshalling type contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. Th...

MS17-010 EternalRomance/EternalSynergy/EternalChampion SMB Remote Windows Code Execution

This module will exploit SMB with vulnerabilities in MS17-010 to achieve a write-what-where primitive. This will then be used to overwrite the connection session information with as an Administrator session. From there, the normal psexec payload code execution is done. Exploits a type confusion...

CVE-2016-6891

MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...

Debian DLA-484-1 : graphicsmagick security update (ImageTragick)

Several security vulnerabilities were discovered in graphicsmagick a tool to manipulate image files. GraphicsMagick is a fork of ImageMagick and also affected by vulnerabilities collectively known as ImageTragick, that are the consequence of lack of sanitization of untrusted input. An attacker wi...

Windows - Primitive Keylogger to File Null Free Shellcode (431 (0x01AF) bytes)

/ ; Exploit Title: All windows null free shellcode - primitave keylogger to file - 431 0x01AF bytes ; Date: Sat Apr 23 18:34:25 GMT 2016 ; Exploit Author: Fugu ; Vendor Homepage: www.microsoft.com ; Version: all afaik ; Tested on: Win7 im guessing it will work on others ; Note: it will write to...

Windows kernel vulnerability MS15-0 1 0/CVE-2 0 1 5-0 0 5 7 analysis and use with the EXP-a vulnerability warning-the black bar safety net

Description Back in 2 0 1 5 early Udi Yavo1found that one affects Windows XP to Windows 1 0previewof the Windows kernel vulnerability, the following two article on the CVE-2 0 1 5-0 0 5 7 analysis of the article, we can refer to one of the two: 1. FireEye described some technical details about th...

Adobe Flash - uint Capacity Field

Adobe Flash - uint Capacity Field Source: https://code.google.com/p/google-security-research/issues/detail?id=504 The latest version of the Vector. length check in Flash 18,0,0,232 is not robust against memory corruptions such as heap overflows. While it’s no longer possible to obviously bypass t...

OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...

OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...

OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...

OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...

OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...

primitive cms 1.0.9 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Primitive CMS 1.0.9 Multiple Vulnerabilities Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.bouzouste.info/ Software Link: http://www.bouzouste.info/link/click.php?id=1 Version: 1.0.9 Vulnerability 1...

OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security...

OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security...

OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security...

OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security...

OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security...

OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security...

OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security...