Oracle Solaris Kernel DoS

The vulnerability of the Oracle Solaris operating system’s kernel is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

A new rootkit comes to an ATM near you

Its not unusual to hear about malware created to affect automated teller machines ATMs. Malware can be planted at the ATMs PC or its network, or attackers could launch a Man-in-the-Middle MiTM attack. Recently, a new rootkit, which the Mandiant Advanced Practices team have named CAKETAP, was foun...

Hackers Target Bank Networks with new Rootkit to Steal Money from ATM Machines

A financially motivated threat actor has been observed deploying a previously unknown rootkit targeting Oracle Solaris systems with the goal of compromising Automatic Teller Machine ATM switching networks and carrying out unauthorized cash withdrawals at different banks using fraudulent cards...

OPENSUSE-SU-2022:0873-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u322 icedtea-3.22.0 Including the following security fixes: - CVE-2022-21248, bsc1194926: Enhance cross VM serialization - CVE-2022-21283, bsc1194937: Better String matching - CVE-2022-21293, bsc1194935: Improve...

Oracle Solaris Denial of Service Vulnerability (CNVD-2022-25215)

Oracle Solaris is a UNIX operating system from Oracle. A denial of service vulnerability exists in Oracle Solaris Component: Kernel version 11. An attacker could exploit this vulnerability to compromise Oracle Solaris, causing Oracle Solaris to hang or crash frequently and repeatedly...

Unspecified Vulnerability in Oracle Solaris (CNVD-2022-25217)

Oracle Solaris is a UNIX operating system from Oracle. Oracle Solaris suffers from a security vulnerability that could allow a low-privileged attacker to compromise Oracle Solaris by logging on to the infrastructure that executes Oracle Solaris.A successful attack would require human-computer...

Solaris/SPARC - setuid(0) + execve (/bin/ksh) Shellcode

/ sparcsolarisexec.c - Solaris/SPARC execve shellcode Copyright c 2022 Marco Ivaldi Pretty standard Solaris/SPARC setuid/execve shellcode. Tested on: SunOS 5.10 GenericVirtual sun4u sparc SUNW,SPARC-Enterprise / char sc = / Solaris/SPARC execve shellcode 12 + 48 = 60 bytes / / setuid0 /...

Solaris/SPARC - setuid(0) + chmod (/bin/ksh) + exit(0) Shellcode

/ sparcsolarischmod.c - Solaris/SPARC chmod shellcode Copyright c 2022 Marco Ivaldi Solaris/SPARC setuid/chmod/exit shellcode. Tested on: SunOS 5.10 GenericVirtual sun4u sparc SUNW,SPARC-Enterprise / char sc = / Solaris/SPARC chmod shellcode 12 + 32 + 20 = 64 bytes / / setuid0 / "\x90\x08\x3f\xff...

Solaris/SPARC - chmod(./me) Shellcode

/ sparcsolarischmod2.c - Solaris/SPARC chmod shellcode Copyright c 2022 Marco Ivaldi Very small Solaris/SPARC chmod shellcode. See also: http://phrack.org/issues/70/13.htmlarticle Tested on: SunOS 5.10 GenericVirtual sun4u sparc SUNW,SPARC-Enterprise / char sc = / Solaris/SPARC chmod shellcode ma...

Unspecified Vulnerability in Oracle Solaris (CNVD-2022-36957)

Oracle Solaris is a set of UNIX operating systems from Oracle. Oracle Solaris has a security vulnerability that could allow a low-privileged attacker to compromise Oracle Solaris by logging on to the infrastructure that executes Oracle Solaris.A successful attack would require human-computer...

Vulnerability fixed in IBM MQ

A vulnerability has been fixed in IBM MQ for the Solaris platform. A malicious party could potentially exploit the vulnerability to cause a denial-of-service via the Queue Manager channel process. IBM has released updates to fix the vulnerability in MQ 9.1. For more information, see:...

Security Bulletin: IBM MQ is vulnerable to a denial of service attack caused by an issue within the channel process.(CVE-2021-39034)

Summary An issue was identified in the IBM MQ Version 9.1 queue manager channel process on Solaris platforms, that could be exploited by an attacker to cause a denial of service attack. Vulnerability Details CVEID: CVE-2021-39034 DESCRIPTION: IBM MQ is vulnerable to a denial of service attack...

phoronix-test-suite 跨站脚本漏洞

phoronix-test-suite is the most comprehensive testing and benchmarking platform for Linux, Solaris, macOS, Windows and BSD operating systems. A cross-site scripting vulnerability exists in phoronix-test-suite that stems from the presence of an XSS...

Oracle Solaris Input Validation Error Vulnerability

Oracle Solaris is a UNIX operating system from Oracle Corporation USA. Oracle Solaris is vulnerable to an input validation error, which can be exploited by attackers to cause an unauthorized capability to cause a partial denial of service partial DOS of Oracle Solaris...

Oracle Solaris Critical Patch Update : jan2022_SRU11_4_41_107_2

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Libraries. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with networ...

Oracle Solaris Critical Patch Update : jan2022_SRU11_4_40_107_3

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to t...

Oracle Solaris Critical Patch Update : jan2022_SRU11_4_39_107_1

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. Supported versions that are affected are 11 and 10. Easily exploitable vulnerability allows low privileged attacker with...

Oracle Solaris Critical Patch Update : jan2022_SRU11_3_36_27_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. Supported versions that are affected are 11 and 10. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2022-21375

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2022-21375

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...