CVE-2017-1145: Improper Resource Shutdown or Release

IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference : 1999672...

CVE-2015-8987: Improper Access Control

Man-in-the-middle MitM attack vulnerability in non-Mac OS agents in McAfee now Intel Security Agent MA 4.8.0 patch 2 and earlier allows attackers to make a McAfee Agent talk with another, possibly rogue, ePO server via McAfee Agent migration to another ePO server...

RHEL 6 : qemu-kvm-rhev (RHSA-2017:0344)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0344 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...

Network-Analysis-Tools - Pcap Capture File Analysis Tool

Pcap Capture File Analysis Tool Features 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode 6-Connection details 7-Ports Used 8-ALL Ip List 9-Manuel Packet Filter 10-Smtp Analysis 11-Web Attack Detect Installation Modules $ pip install pyshark $ pip install...

CVE-2016-9686

The Puppet Communications Protocol PCP Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2...

CVE-2017-2602

jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents SECURITY-358...

CVE-2017-2611

Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes SECURITY-389. The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes that a...

Description of the cumulative update for Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit: March, 2011

Describes the bugs that are resolved in the cumulative update for Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit that is dated March 2011.SummaryThis article describes the issues that is fixed in the cumulative update for Office Communications Serv...

System Center 2012 SP1 Data Protection Manager Update Rollup 6

System Center 2012 SP1 Data Protection Manager Update Rollup 6 Summary This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 SP1 Data Protection Manager. Additionally, this article contains the installation instructions for Update Rollup 6 for System...

Update Rollup 7 for System Center 2012 Data Protection Manager SP1

Update Rollup 7 for System Center 2012 Data Protection Manager SP1 Introduction This article describes the issues that are fixed in Update Rollup 7 for Microsoft System Center 2012 Data Protection Manager DPM Service Pack 1 SP1. This article also contains the installation instructions for Update...

Targeted Geolocation Framework: HoneyBadger v2

HoneyBadger is a framework for targeted geolocation. While honeypots are traditionally used to passively detect malicious actors, HoneyBadger is an Active Defense tool to determine who the malicious actor is and where they are located. HoneyBadger leverages “agents” built in various technologies...

clementsestateagents.co.uk XSS vulnerability

Vulnerable URL: http://www.clementsestateagents.co.uk/search?saletype=buy=-1=99999999="=true= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11548518 VIP website status:| No Check...

PT-2016-4120

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0.0 through 6.0.1.13 IBM UrbanCode Deploy versions 6.1.0 through 6.1.3.2 IBM UrbanCode Deploy versions 6.2.0 through 6.2.1.0 Description The issue allows local users to obtain root access to arbitrary agents via...

CVE-2016-5229 - Deserialisation resulting in remote code execution caused by insufficient restriction on permitted deserialised classes

Bamboo had a resource that deserialised input from build agents and did not sufficiently restrict which classes could be deserialised. To exploit this issue, attackers need to have a valid Bamboo agent fingerprint or be able to run code on a Bamboo agent. Affected versions: All versions of Bamboo...

CVE-2016-0260

Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service heap memory consumption by triggering many errors...

PT-2016-2296

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 8.0.0 through 8.0.0.4 Description The issue is related to a memory leak in queue-manager agents, which can be exploited by remote attackers to cause a denial of service through heap memory consumption. This can be...

CVE-2016-0260: Undefined Security Weakness

Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service heap memory consumption by triggering many errors...

Vicidial 2.11 - Scripts Persistent Cross-Site Scripting

Exploit Title: Vicidial 2.11 Scripts - Authenticated Stored XSS Date: 0 day Exploit Author: David Silveiro Exploit Author Github: github.com/davidsilveiro Vendor Homepage: http://vicidial.org Software Link: https://sourceforge.net/projects/astguiclient/files/astguiclient2.11rc1.zip/download...

Symantec Embedded Security: Critical System Protection and Symantec Data Center Security: Server Adv

SUMMARY Symantec Embedded Security: Critical System Protection SES:CSP and Data Center Security: Server Advanced SDCS:SA were susceptible to security issues in the management server and deployed agents which could enable unauthorized elevated access, bypassing security protection on agents,...

IBM UrbanCode Deploy Artifact Download Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...