[SECURITY] [DLA 1226-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u8 CVE ID : CVE-2017-11408 CVE-2017-17083 CVE-2017-17084 CVE-2017-17085 It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARPMPA, NetBIOS, Profinet I/O and...

Wireshark Denial of Service Vulnerability (CNVD-2018-00104)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed network packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A denial of service...

Droidefense - Advance Android Malware Analysis Framework

Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and tricks that malware researcher have on they every day work. For those situations on where the malware has...

Debian DSA-4060-1 : wireshark - security update

It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARPMPA, NetBIOS, Profinet I/O and AMQP, which result in denial of dervice or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

[SECURITY] [DSA 4060-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4060-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2017 https://www.debian.org/security/faq -...

Description of the security update for SharePoint Server 2016: November 14, 2017

None None...

WordPress Simple Login Log 1.1.1 SQL Injection

A A A A A A A A A A A A DefenseCode ThunderScan SAST Advisory A A A A WordPress Simple Login Log Plugin Multiple SQL Injection A A A A A A A A A A A A A A A A A Security Vulnerabilities Advisory ID:A A A DC-2017-01-013 Advisory Title: WordPress Simple Login Log Plugin Multiple SQL A Injection...

The vulnerability of the dynamic analyzer for XML files in the wsisapi.dll library of the enterprise automation system 1C:Enterprise allows a perpetrator to cause service failures and gain access to internal network resources.

The vulnerability of the dynamic analyzer for XML files in the wsisapi.dll library of the enterprise automation system 1C:Enterprise is related to the implementation of XML. Exploiting this vulnerability can allow a malicious actor to cause service failures and gain access to internal network...

Blue Coat Malware Analysis Appliance and Malware Analyzer G2 Command Execution Vulnerability

The Blue Coat Malware Analysis Appliance MAA and Malware Analyzer G2 are both malware analysis appliances in Blue Coat's Blue Coat Advanced Threat Protection solution, which provides malware blasting and analysis, exposing zero-day threats and unknown malware, and sharing threat intelligence...

Yuki Chan - Automate Pentest Tool

The Yuki Chan is an Automated Penetration Testing tool this tool will auditing all standard security test method for you. WARNING I highly recommend using this tool by using Kali Linux OS By using this tool it means you agree with terms, conditions, and risks By using this tool you agree that 1...

USN-3415-2: tcpdump vulnerabilities

USN-3415-1 fixed vulnerabilities in tcpdump for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 17.04. This update provides the corresponding tcpdump update for Ubuntu 12.04 ESM. Original advisory details: Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attack...

[SECURITY] [DSA 3971-1] tcpdump security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3971-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2017 https://www.debian.org/security/faq -...

CVE-2015-4523

Blue Coat Malware Analysis Appliance MAA before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service host reboot or reset to factory defaults, or execute arbitrary code via vector...

CVE-2015-4523

The CVE-2015-4523 issue affects the Blue Coat Malware Analysis Appliance (MAA) and Malware Analyzer G2. A vulnerability allows a VM-escaped sample to bypass VM protections and write to the host file system, potentially overwriting files and causing a reboot or factory reset; in some cases it coul...

CVE-2015-4523

Blue Coat Malware Analysis Appliance MAA before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service host reboot or reset to factory defaults, or execute arbitrary code via vector...

Debian DLA-1090-1 : tcpdump security update

Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service application crash. For Debian 7 'Wheezy', these problems have been fixed in version 4.9.0-1deb7u2. We recommend that you upgrade your tcpdump...

[SECURITY] [DLA 1090-1] tcpdump security update

Package : tcpdump Version : 4.9.0-1deb7u2 CVE ID : CVE-2017-11108 CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service application crash. For Debian 7...

Zoho ManageEngine Firewall Analyzer Group Chat Arbitrary File Upload Vulnerability

Zoho ManageEngine Firewall Analyzer is a set of Web-based firewall log analysis tools from ZOHO, which collects, correlates, analyzes, and reports on logs from firewalls, proxy servers, and Radius servers throughout the enterprise.Group Chat is one of the team communication Group Chat is one of t...

CVE-2017-14123

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by...

Unrestricted file upload

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by...