MS16-075: Security Update for Windows SMB Server: June 14, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker...

HP Data Protector 6.10 / 6.11 / 6.20 Install Service

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'HP Data Protector 6.10/6.11/6.20 Install Service', 'Description' = %q This module exploits HP Data Protector Omniinet process o...

HP Data Protector 6.10/6.11/6.20 Install Service

This module exploits HP Data Protector OmniInet process on Windows only. This exploit invokes the install service function which allows an attacker to create a custom payload in the format of an executable. To ensure this works, the SMB server created in MSF must have a share called Omniback whic...

HP Photosmart B210 SMB server denial of service vulnerability

HP Photosmart B210 is a printer product. A security vulnerability exists in the HP Photosmart B210 that allows remote attackers to commit a denial of service by submitting a special request...

HP Photosmart B210 printer SMB server buffer overflow vulnerability

Overview The HP Photosmart B210 printer utilizes an SMB server for managing the print queue. An invalid SMB packet may cause a denial of service condition, requiring the printer to be restarted. Description Fuzzing the first 296 bytes of an SMB packet may in some cases cause a denial of service...

CVE-2015-5913

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

CVE-2015-5913

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

Cross site request forgery (csrf)

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

CVE-2015-5913

The CVE-2015-5913 entry affects Heimdal Kerberos as used by Apple OS X before 10.11. The underlying issue allows remote attackers to perform replay attacks against the SMB server by sending packet data that corresponds to a Kerberos-authenticated request. Affected environment is OS X prior to 10....

CVE-2015-5913

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

Apple OS X Kerberos Authentication Credential Replay Vulnerability

Apple OS X is an operating system developed by Apple Inc. An authentication vulnerability exists in Apple OS X Kerberos credentials, which allows remote attackers to exploit the vulnerability to replay Kerberos to an SMB server...

WinRar 5.30 Beta 4 - Settings Import Command Execution

WinRar 5.30 Beta 4 - Settings Import Command Execution !/usr/bin/python -w Title : WinRar Settings Import Command Execution Date : 02/10/2015 Author : R-73eN Tested on : Windows 7 Ultimate Vulnerable Versions : Winrar 5.30 beta 4 The vulnerability exists in the "Import Settings From File" functio...

MS15-0 8 3: Windows SMB memory corruption vulnerability analysis-vulnerability warning-the black bar safety net

2 0 1 5 年 8 月 1 1, Microsoft has released1 4 a security patch, which includes an SMB Server patch. In this article I will explain how I trigger the vulnerability. Microsoft Security Bulletin MS15-0 8 3 In all of the repair patch, I“vulnerability in Server Message Block could allow remote code...

Amazon Linux: Security Advisory (ALAS-2015-551)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2474

Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block SMB server error-logging action, aka "Server Message Block Memory Corruption Vulnerability."...

Updated curl package fixes security vulnerability

libcurl can wrongly send HTTP credentials when re-using connections. Even if the handle for an HTTP connection is reset, it retains the credentials, which can cause them to be unintentionally leaked in subsequent requests CVE-2015-3236. libcurl can get tricked by a malicious SMB server to send of...

MGASA-2015-0263 Updated curl package fixes security vulnerability

libcurl can wrongly send HTTP credentials when re-using connections. Even if the handle for an HTTP connection is reset, it retains the credentials, which can cause them to be unintentionally leaked in subsequent requests CVE-2015-3236. libcurl can get tricked by a malicious SMB server to send of...

openSUSE Security Update : curl (openSUSE-2015-446)

Curl was updated to fix two security issues and enable metalink support The following vulnerabilities were fixed : - CVE-2015-3236: libcurl could have wrongly send HTTP credentials when re-using connections boo934501 - CVE-2015-3237: libcurl could have been tricked by a malicious SMB server to se...

Medium: curl

Issue Overview: As discussed upstream http://curl.haxx.se/docs/adv20150617A.html, libcurl can wrongly send HTTP credentials when re-using connections. CVE-2015-3236 Also discussed upstream http://curl.haxx.se/docs/adv20150617B.html, libcurl can get tricked by a malicious SMB server to send off da...

FreeBSD : cURL -- Multiple Vulnerability (2438d4af-1538-11e5-a106-3c970e169bc2)

cURL reports : libcurl can wrongly send HTTP credentials when re-using connections. libcurl allows applications to set credentials for the upcoming transfer with HTTP Basic authentication, like with CURLOPTUSERPWD for example. Name and password. Just like all other libcurl options the credentials...