CVE-2016-5166

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

chromium: multiple issues

CVE-2016-5147 CVE-2016-5148 cross-site scripting Universal XSS in Blink. - CVE-2016-5149 script injection Script injection in extensions. - CVE-2016-5150 arbitrary code execution Use after free in Blink. - CVE-2016-5151 arbitrary code execution Use after free in PDFium. - CVE-2016-5152...

Panasonic FPWIN Pro Detection (Windows SMB Login)

Detection of installed version of Panasonic FPWIN Pro on Windows. The script logs in via smb, searches for Panasonic FPWIN Pro in the registry and gets the version from registry. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

HPE Storage Sizer Detection (Windows SMB Login)

Detects the installed version of HPE Storage Sizer. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 53 to the stable channel - 53.0.2785.89 for Windows, Mac and 53.0.2785.92 for Linux. This will roll out over the coming days/weeks Note:MSI still points to M52 and will be updated later. Chrome 53.0.2785.89 and 53.0.2785.92 contains...

F5 Networks BIG-IP : Samba vulnerabilities (K53313971)

CVE-2016-2110 The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryptio...

Flexera InstallAnywhere Detection (Windows SMB Login)

Detects the installed version of Flexera InstallAnywhere on Windows. The script logs in via smb, searches for InstallAnywhere in the registry and gets the version from SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Trend Micro Worry-Free Business Security Services (WFBSS) Detection (Windows SMB Login)

SMB login-based detection of Trend Micro Worry-Free Business Security Services WFBSS. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Trend Micro Worry-Free Business Security (WFBS) Detection (Windows SMB Login)

SMB login-based detection of Trend Micro Worry-Free Business Security WFBS. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Trend Micro OfficeScan Detection (Windows SMB Login)

Detects the installed version of Trend Micro OfficeScan. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

ZYCOO IP Phone System Remote Command Execution

Vulnerable hardware : ZYCOO IP phone system Vendor : zycoo.com Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , CooVox Series IP Phone System is the most innovative solution for VoIP telecommunication in SMB Small and Medium-sized Business market...

ZYCOO IP Phone System - Remote Command Execution

ZYCOO IP Phone System - Remote Command Execution Vulnerable hardware : ZYCOO IP phone system Vendor : zycoo.com Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , CooVox Series IP Phone System is the most innovative solution for VoIP telecommunicatio...

ZYCOO IP Phone System - Remote Command Execution

Exploit for cgi platform in category web applications Vulnerable hardware : ZYCOO IP phone system Vendor : zycoo.com Author : Ahmed sultan @0x4148 Email : email protected Summary : According to the vendor's site , CooVox Series IP Phone System is the most innovative solution for VoIP...

ZYCOO IP Phone System - Remote Command Execution

Vulnerable hardware : ZYCOO IP phone system Vendor : zycoo.com Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , CooVox Series IP Phone System is the most innovative solution for VoIP telecommunication in SMB Small and Medium-sized Business market...

Flexera InstallShield Detection (Windows SMB Login)

SMB login-based detection of Flexera InstallShield. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hydra 8.3 - Network Logon Cracker

A very fast network logon cracker which support many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of concept...

Microsoft Office Word Viewer Multiple Remote Code Execution Vulnerabilities (3177393)

This host is missing a critical security update according to Microsoft Bulletin MS16-097. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

More than 6 0 Non-disclosure vulnerability 2 2 a home router(SOHU router)-vulnerability warning-the black bar safety net

! The affected router list as follows: 1. Observa Telecom AW4062 2. Comtrend WAP-5813n 3. Comtrend CT-5 3 6 5 4. D-Link DSL-2750B 5. Belkin F5D7632-4 6. Sagem LiveBox Pro 2 SP 7. Amper Xavi 7 9 6 8 and 7 9 6 8+ 8. Sagem Fast 1 2 0 1 9. Linksys WRT54GL 1 0. Observa Telecom RTA01N 1 1...

Careful Windows legacy authentication exposes your system account password-loophole warning-the black bar safety net

! When you are using a browser to access the site, the Windows of an old vulnerability might reveal your computer's username and password, the Microsoft login information, and even your VPN account password. Many years ago when Windows still use single-core processor and 256M of RAM, Microsoft...

SMB Delivery Module

require 'msf/core' require 'msf/core/exploit/powershell' class MetasploitModule "SMB Delivery", 'Description' = %q This module serves payloads via an SMB server and provides commands to retrieve and execute the generated payloads. Currently supports DLLs and Powershell. , 'License' = MSFLICENSE,...