On The Latest ShadowBrokers Dump, Microsoft, Oracle, and the Bosch OBD-II Dongle Hack

Mike Mimoso and Chris Brook discuss the news of the week, including last Friday’s ShadowBrokers dump, how Microsoft learned and patched the vulnerabilities, and the Solaris bugs patched by Oracle. Microsoft ditching passwords, and a new car dongle hack are also discussed. Download:...

Oracle Solaris Cluster Local Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Solaris Cluster is one of the enterprise cluster components for the Oracle Sun Solaris operating system. Oracle Solaris Cluster has a local security vulnerability. The "NAS Device Additions" subcomponent ...

Oracle Solaris Local Vulnerability (CNVD-2017-06019)

Oracle Sun Solaris is a computer operating system developed by Sun Microsystems. A local security vulnerability exists in Oracle Sun Solaris. Exploitation of this vulnerability by a local attacker could compromise system confidentiality...

Oracle Solaris Local Vulnerability (CNVD-2017-06021)

Oracle Sun Solaris is a computer operating system developed by Sun Microsystems. A security vulnerability exists in Oracle Sun Solaris. Exploitation of this vulnerability by a local attacker could compromise system confidentiality...

Record Oracle Patch Update Addresses ShadowBrokers, Struts 2 Vulnerabilities

Oracle released its biggest Critical Patch Update ever on Tuesday, and with it came added urgency in the form of patches for the Solaris vulnerabilities exposed by the ShadowBrokers last week, as well as the recent Apache Struts 2 vulnerability, also under public attack. In all, Oracle admins hav...

Oracle Solaris Critical Patch Update : apr2017_SRU11_3_17_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Zone. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker...

Oracle Solaris Critical Patch Update : apr2017_SRU11_3_19_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attack...

Oracle Solaris Critical Patch Update : apr2017_SRU11_3_18_6_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily exploitable vulnerability...

Oracle Plugs Struts and Shadow Brokers hole along with 299 Total Vulnerabilities

Today Oracle released a total of 299 new security fixes across all product families. It is important to note that it fixed 25 instances of the infamous Apache Struts vulnerability which could allow a remote attacker to take complete control of the server running Struts. The struts fix was applied...

Solaris 10 (x86) : 144230-02 (deprecated)

X11 6.6.2x86: libpixman patch. Date this patch was last updated by Sun : Apr/17/17 This plugin has been deprecated and either replaced with individual 144230 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

shadowbroker

The repository cjd9023/shadowbroker contains a collection of exploits and tools leaked by the Shadow Brokers, a group known for releasing sensitive information. The exploits are categorized into two main sections: "Exploits" and "Utilities." The "Exploits" section includes 25 exploits targeting...

Solaris x86 / SPARC EXTREMEPARR dtappgather Privilege Escalation

!/bin/ksh Exploit PoC reverse engineered from EXTREMEPARR which provides local root on Solaris 7 - 11 x86 & SPARC. Uses a environment variable of setuid binary dtappgather to manipulate file permissions and create a user owned directory anywhere on the system as root. Can then add a shared object...

Solaris 7 - 11 (x86 & SPARC) - EXTREMEPARR dtappgather Privilege Escalation Exploit

Exploit for solaris platform in category local exploits !/bin/ksh Exploit PoC reverse engineered from EXTREMEPARR which provides local root on Solaris 7 - 11 x86 & SPARC. Uses a environment variable of setuid binary dtappgather to manipulate file permissions and create a user owned directory...

Solaris 7 11 (SPARCx86) - EXTREMEPARR dtappgather Privilege Escalation

Solaris 7 11 SPARCx86 - EXTREMEPARR dtappgather Privilege Escalation !/bin/ksh Exploit PoC reverse engineered from EXTREMEPARR which provides local root on Solaris 7 - 11 x86 & SPARC. Uses a environment variable of setuid binary dtappgather to manipulate file permissions and create a user owned...

Solaris 7 < 11 (SPARC/x86) - 'EXTREMEPARR' dtappgather Privilege Escalation

!/bin/ksh Exploit PoC reverse engineered from EXTREMEPARR which provides local root on Solaris 7 - 11 x86 & SPARC. Uses a environment variable of setuid binary dtappgather to manipulate file permissions and create a user owned directory anywhere on the system as root. Can then add a shared object...

Shadow Brokers Group Releases More Stolen NSA Hacking Tools & Exploits

Remember The Shadow Brokers? They are back. A hackers group that previously claimed to have stolen a bunch of hacking tools malware, zero-day exploits, and implants created by the NSA and gained popularity last year for leaking a portion of those tools is back. Today, The Shadow Brokers group...

Solaris 10 (x86) : 152644-05 (deprecated)

SunOS 5.10x86: Apache 2.4 Patch. Date this patch was last updated by Sun : Sep/06/17 This plugin has been deprecated and either replaced with individual 152644 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (sparc) : 152510-06 (deprecated)

SunOS 5.10: Tomcat 8 patch. Date this patch was last updated by Sun : Sep/06/17 This plugin has been deprecated and either replaced with individual 152510 patch-revision plugins, or deemed non-security related. File data solaris10152510.nasl...

Solaris 10 (sparc) : 152514-02 (deprecated)

SunOS 5.10: Tomcat 6 Patch. Date this patch was last updated by Sun : Jun/15/17 This plugin has been deprecated and either replaced with individual 152514 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (sparc) : 126630-06 (deprecated)

SunOS 5.10: tcsh patch. Date this patch was last updated by Sun : Feb/09/17 This plugin has been deprecated and either replaced with individual 126630 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...