Oracle to Kill Java Plugin

It’s the end of an era. Oracle has announced its intent to nail the coffin shut on the Java browser plugin. The company confirmed Wednesday that it expects to deprecate the plugin in JDK 9, slated for release in September, and JRE, in a future Java SE release. Dalibor Topic, a member of Oracle’s...

Apple Mac OSX iOS - Double-Delete IOHIDEventQueue::start Code Execution

Apple Mac OSX iOS - Double-Delete IOHIDEventQueue::start Code Execution Source: https://code.google.com/p/google-security-research/issues/detail?id=542 The IOHIDLibUserClient allows us to create and manage IOHIDEventQueues corresponding to available HID devices. Here is the ::start method, which...

Apple Mac OSX / iOS - Double-Delete IOHIDEventQueue::start Code Execution

Source: https://code.google.com/p/google-security-research/issues/detail?id=542 The IOHIDLibUserClient allows us to create and manage IOHIDEventQueues corresponding to available HID devices. Here is the ::start method, which can be reached via the IOHIDLibUserClient::startQueue external method:...

Vulnerability of JRockit and Java Platform software frameworks, which allow attackers to read data or modify data.

The vulnerability of the Libraries sub-component in JRockit and Java Platform software platforms is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, add, or delete data through network packets via the Java Web...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the 2D software platform of Java Platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via network packets through an Java Web Start application or an applet...

Vulnerability of Jrockit and Java Platform software platforms, which allow attackers to cause partial service interruptions

The vulnerability of the JAXP sub-component in JRockit and Java Platform-related software platforms is associated with errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service failure through network packets via the Java Web Start...

Citrix Credential Wallet Service and Citrix Peer Resolution Service do not start

On the Citrix storefront services console, the Citrix Peer Resolution Service and the Citrix Credential Wallet services stay in stopped state, wouldn't start even if we start manually...

Out-of-bounds

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service out-of-bounds heap read via unspecified vectors related to incorrect entities boundaries and start tags...

Pyersinia - Network Attack Tool

Pyersinia is a similar tool to Yersinia, but Pyersinia is implemented in Python using Scapy. The main objective is the realization of network attacks such as spoofing ARP, DHCP DoS , STP DoS among others. The community can add new attacks on the tool in a simple way, using plugins. This is becaus...

CVE-2015-7500

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service out-of-bounds heap read via unspecified vectors related to incorrect entities boundaries and start tags...

Siemens Simatic S7 1200 - CPU Command Module (Metasploit)

Siemens Simatic S7 1200 - CPU Command Module Metasploit Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-1200...

Siemens Simatic S7 1200 CPU Command Module (MSF) Exploit

Exploit for hardware platform in category remote exploits Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-12...

Siemens Simatic S7 1200 - CPU Command Module (Metasploit)

Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-1200 CPU START/STOP Module', 'Description' = %q Update 2015...

Circutor PowerStudio SCADA 4.0.5 Unquoted Service Path Elevation Of Privilege Vulnerability

Exploit for windows platform in category remote exploits Circutor PowerStudio SCADA 4.0.5 Unquoted Service Path Elevation Of Privilege Vendor: CIRCUTOR SA Product web page: http:/www.circutor.com Affected version: PowerStudio SCADA 4.0.5 and OPC Server 1.4.1 Summary: CIRCUTOR's Electrical Energy...

UBUNTU-CVE-2015-8077

Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the startoctet variable. NOTE: this vulnerability exists because of an incomplete fix for...

UBUNTU-CVE-2015-7500

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service out-of-bounds heap read via unspecified vectors related to incorrect entities boundaries and start tags...

Vulnerability of the Java Platform software platform, which allows attackers to gain access to protected information

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through the use of the Java Web Start application or Java applet...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via the Java Web Start application or Java applet, from a remote location...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the 2D software platform of Java Platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via an Java Web Start application or Java applet, operating remotely...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the Java Platform’s CORBA subsystem is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a Java Web Start application or Java applet, from a remote location...