Citrix ReceiverReceiver Desktop Lock 4.5 - Authentication Bypass

Citrix ReceiverReceiver Desktop Lock 4.5 - Authentication Bypass thel3l Title: Citrix Receiver/Receiver Desktop Lock 4.5 Incorrect Access Control CVE: CVE-2016-9111 Date of Discovery: October 27 2016 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Citrix...

Fluxion - WPA/WPA2 Security Hacked Without Brute Force

Fluxion is a remake of linset by vk496 with less bugs and more features. It's compatible with the latest release of Kali Rolling. Latest builds stable and beta HERE . If you new, please start reading the wiki Fluxion GUI How it works Scan the networks. Capture a handshake can't be used without a...

MS16-112: Security Update for Windows Lock Screen (3178469)

The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability due to improperly allowing web content to load from the Windows lock screen. A local attacker can exploit this, by connecting to a maliciously configured WiFi hotspot or by...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the megasasdcmdsetproperties function in the hw/scsi/megasas.c file of the QEMU hardware emulation software is related to the creation of a host adapter for the MegaRAID SAS 8708EM2 device. Exploiting this vulnerability allows an attacker to trigger a service failure memory...

CVE-2016-5105

The megasasdcmdcfgread function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface MFI command...

Bluetooth Smart MITM Framework: BtleJuice

Bluetooth Smart MITM Framework BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

AIX 6.1 TL 9 : mustendd (IV80569)

https://vulners.com/cve/CVE-2016-0281 IBM AIX Adapter FC5899 / FC1763 with 'jumboframes' disabled could allow a remote attacker to send specially crafted packets that would crash the adapter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX...

A large number of wireless keyboard the presence of KeySniffer vulnerability, you can sniff the user input-vulnerability warning-the black bar safety net

! A few dollars of a plurality of antennas, a wireless transmitter and a few lines of Python code, and through these, hackers can be in the tens of meters away from the initiative to record your user name, passwords, credit card, and you write the manuscript, in short, is that you use the wireles...

The vulnerability of the Zyxel ZLD operating system, which allows a malicious individual to trigger a service failure.

The Zyxel ZyWALL USG 300 network firewall/routing system contains a vulnerability that, if exploited by a malicious actor, can cause malfunctions in the network adapter. This vulnerability allows a remote attacker to trigger malfunctions by sending a specially crafted ARP packet...

WifiChannelMonitor - Monitor APs and Wifi clients on selected channel (Monitor Mode) for Window

WifiChannelMonitor is a utility for Windows that captures wifi traffic on the channel you choose, using Microsoft Network Monitor capture driver in monitor mode, and displays extensive information about access points and the wifi clients connected to them. WifiChannelMonitor also allows you to vi...

CVE-2016-5107

The megasaslookupframe function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service out-of-bounds read and crash via unspecified vectors...

CVE-2016-5107

The megasaslookupframe function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service out-of-bounds read and crash via unspecified vectors...

QEMU scsi information disclosure vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An information disclosure vulnerability exists in QEMU's scsi. When the program is supported using the MegaRAID SAS 8708EM2 Host Bus Adapter emulator, an attacker can...

GE工业UPS SNMP适配器任意命令执行漏洞

No description provided by source...

OnionCat - An Anonymous VPN-Adapter (P2P layer 3 VPN based on Tor or I2P)

OnionCat is a VPN-adapter which allows to connect two or more computers or networks through VPN-tunnels. It is designed to use the anonymization networks Tor or I2P as its transport, hence, it provides location-based anonymity while still creating tunnel end points with private unique IP addresse...

GE SNMP/Web Interface Adapter Version Detection

Detection of installed version of SNMP/Web Adapter. The script performs Telnet based detection of SNMP/Web Adapter SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Tableau Sparkler Server User Forgery Vulnerability

Tableau is a very easy to get started with the data analysis software, just import data through a simple point and click, mouse drag and drop to generate reports. A security vulnerability exists in Salesforce Canvas Adapter for Tableau that allows remote attackers to exploit the vulnerability to...

CVE-2016-0862

General Electric GE Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors...

CVE-2016-0861

General Electric GE Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to execute arbitrary commands via unspecified vectors...

Code injection

General Electric GE Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors...