5485 matches found
Directory traversal
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Directory Utility" component. It allows local users to discover the Apple ID of the computer's owner...
Code injection
An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is affected. The issue involves the "StorageKit" component. It allows attackers to discover passwords for APFS encrypted volumes by reading Disk Utility hints, because the stored hint value was accidentally...
CVE-2017-7138
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Directory Utility" component. It allows local users to discover the Apple ID of the computer's owner...
CVE-2017-7138
CVE-2017-7138 affects macOS pre-10.13, specifically the Directory Utility component. A local attacker could leverage a permissions issue in Directory Utility to determine the Apple ID of the computer owner. The Apple security documentation for High Sierra 10.13 notes that such issues in various c...
Tor: Crashes/Buffer at 0x2C0086,name=PBrowser::Msg_Destroy
Hi Team, Steps to Reproduce: 1. Open Tor 2. Navigate to string.html Where string.html : function tor var uristring = unescape"%u4141%u4141"; fori=0; i 3. 'Gah! This tab has crashed. However, running it to debug mode generates the below exception : !!! ParentMessageChannel Error:...
IntRec-Pack - Intelligence and Reconnaissance Package/Bundle installer
Intelligence and Reconnaissance Package/Bundle installer. IntRec-Pack is a Bash script designed to download, install and deploy several quality OSINT, Recon and Threat Intelligence tools. Due to the fact it manages the installation of the various dependencies related to these programs as well it...
WEM Database Upgrade Failure "CREATE DATABASE permission denied in database"
When attempting to create a new Database/update an existing database using the Database Creation Wizard, we receive the following error: The following error is is written to the WEM Database Management Utility Log: "CREATEDATABASE permission denied in database"...
Database Creation Error when creating a new WEM database using a hyphen ("-") in the database name
When attempting to create a new WEM database when using a hyphen '-'in the name, an error appears saying "Database Creation Error". The Citrix WEM Database Management Utility Debug Log contains the following Exception: Exception - CreateVuemdb.Run : SqlDatabaseHelper. connection Error : 102 |...
How to Backup The Veeam ONE SQL Database
Purpose This article documents methods to back up the Veeam ONE SQL database. This is useful when you have to do a backup before an upgrade or if you have been asked to provide a backup of Veeam ONE database to Veeam Support for further in-depth analysis. Solution Identify the Location of the Vee...
file: Stack-based buffer overflow
Background file is a utility that guesses a file format by scanning binary data for patterns. Description An issue discovered in file allows attackers to write 20 bytes to the stack buffer via a specially crafted .notes section. Impact A remote attacker, by using a specially crafted .notes sectio...
Apple macOS High Sierra Bug Exposes Passwords of Encrypted APFS Volumes As Hint
A severe programming error has been discovered in Apple's latest macOS High Sierra 10.13 that exposes passwords of encrypted Apple File System APFS volumes in plain text. Reported by Matheus Mariano, a Brazilian software developer, the vulnerability affects encrypted volumes using APFS wherein th...
[SECURITY] Fedora 27 Update: php-horde-Horde-Image-2.5.2-1.fc27
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
[SECURITY] Fedora 25 Update: php-horde-Horde-Image-2.5.2-1.fc25
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
[SECURITY] Fedora 26 Update: php-horde-Horde-Image-2.5.2-1.fc26
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
Exe2Image - A simple utility to convert EXE files to JPEG images and vice versa.
A simple utility to convert EXE files to PNG images and vice versa. Putty.exe converted to an image. Download Exe2Image...
Apple macOS Information Disclosure Vulnerability (CNVD-2017-34325)
Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Directory Utility component is one of the directory utilities. A security vulnerability exists in the Directory Utility component of Apple macOS High Sierra. A local attacker could exploit this...
Cisco FindIT Network Discovery Utility Code Execution Vulnerability
Cisco FindIT Network Discovery Utility is a network device manager from Cisco USA. The product provides management functions for Cisco network devices. A security vulnerability exists in the Cisco FindIT Network Discovery Utility. A local attacker can exploit this vulnerability by placing an...
DEBIAN-CVE-2017-14650
A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...
CVE-2017-12252
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicio...
CVE-2017-12252
The CVE-2017-12252 issue affects Cisco FindIT Network Discovery Utility. It enables a local, authenticated attacker to perform a DLL preloading attack by placing a malicious DLL in the host’s search path, causing the system to load the attacker’s DLL and partially compromise confidentiality, inte...