284 matches found
CVE-2015-5039
The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or...
CVE-2017-6163
In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard configuration of HTTP/2 or SPDY profile with Client SSL profile, and the client initiates a number of concurrent streams...
The vulnerability of the procedure related to the remote UIM client, the Android CAF-release operating system, allows a perpetrator to compromise the privacy, integrity, and accessibility of protected information.
The vulnerability of the process related to the remote UIM client in Android CAF-release builds is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
OpenSSL 1.1.0 - Remote Client Denial of Service Exploit
Exploit for multiple platform in category dos / poc // Source: https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-affects-servers-as-well-poc/ / SSL server demonstration program Copyright C 2006-2015, ARM Limited, All Rights Reserved...
OpenSSL 1.1.0 Remote Client Denial Of Service
// Source: https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-affects-servers-as-well-poc/ / SSL server demonstration program Copyright C 2006-2015, ARM Limited, All Rights Reserved SPDX-License-Identifier: Apache-2.0 Licensed under the Apach...
Internet Bug Bounty: CVE-2017-3730: Bad (EC)DHE parameters cause a client crash
https://www.openssl.org/news/secadv/20170126.txt https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-affects-servers-as-well-poc/...
OpenSSL 1.1.0 - Remote Client Denial of Service
// Source: https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-affects-servers-as-well-poc/ / SSL server demonstration program Copyright C 2006-2015, ARM Limited, All Rights Reserved SPDX-License-Identifier: Apache-2.0 Licensed under the Apach...
Amazon Linux AMI : nss-util / nss,nss-softokn (ALAS-2016-774)
CVE-2016-2834 nss: Multiple security flaws MFSA 2016-61 Multiple buffer handling flaws were found in the way NSS handled cryptographic data from the network. A remote attacker could use these flaws to crash an application using NSS or, possibly, execute arbitrary code with the permission of the...
CVE-2016-5285
A NULL pointer dereference flaw was found in the way NSS handled invalid Diffie-Hellman keys. A remote client could use this flaw to crash a TLS/SSL server using NSS...
Internet Bug Bounty: Remote client memory corruption in ssl_add_clienthello_tlsext()
https://guidovranken.wordpress.com/2016/10/13/openssl-1-1-0-remote-client-memory-corruption-in-ssladdclienthellotlsext/ OpenSSL is not treating this as a security vulnerability because 1 session tickets need to be enabled 2 request certificate status from server 3 an unrealistically large ALPN li...
MEDCIN engine of the exploitability of the vulnerability details-vulnerability warning-the black bar safety net
! Science: the MEDCIN engine is a service to doctors and nurses electronic medical records system. A few months ago, I was in the MEDCIN engine to older versions of the safety assessment found a loophole. So I to the Supplier a report of the vulnerabilities and then repair, after viewing the...
Java JMX Server code execution exploits and Defense-vulnerability warning-the black bar safety net
jmx basic concepts Java Management Extensions JMX Technology Unsafe configuration From the oracle official documentation: Disabling Security To disable both password authentication and SSL namely to disable all security, you should set the following system properties when you start the Java VM...
Debian DLA-223-1 : nbd security update
A vulnerability has been discovered in nbd-server, the server for the Linux Network Block Device. CVE-2015-0847 Tuomas Rsnen discovered that unsafe signal handling is present in nbd-server. This vulnerability could be exploited by a remote client to cause a denial of service. For the oldoldstable...
DLA-223-1 nbd - security update
Bulletin has no description...
VPN Tunnel Detection via HTTP CONNECT
Binary data 3177.prm...
Kernel: target/rd: imformation leakage
An information leak flaw was found in the RAM Disks Memory Copy rdmcp backend driver of the iSCSI Target subsystem of the Linux kernel. A privileged user could use this flaw to leak the contents of kernel memory to an iSCSI initiator remote client...
MPG123 0.59 Find Next File Remote Client-Side Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11958/info A remote client-side buffer overflow vulnerability affects mpg123. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into static...
IBM Tivoli Storage Manager Express RCA Service Buffer Overflow
No description provided by source. $Id: ibmtsmrcadicugetidentify.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Valve Software Half-Life Server <= 1.1.1.0 , 3.1.1.1c1 and 4.1.1.1a Multiplayer Request Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/8300/info Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the software fails to sufficiently bounds-check client-supplied data during...