5562 matches found
Microsoft MsMpEng - Multiple Problems Handling ntdll!NtControlChannel Commands
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1260 MsMpEng includes a full system x86 emulator that is used to execute any untrusted files that look like PE executables. The emulator runs as NT AUTHORITY\SYSTEM and isn't sandboxed. Browsing the list of win32 APIs that the...
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: Trend Micro Interscan Web Security Virtual Appliance IWSVA 6.5.x Multiple Vulnerabilities Date: 12/01/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage:...
SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nss, mozilla-nspr, java-1_8_0-openjdk (SUSE-SU-2017:1248-1)
Mozilla Firefox was updated to the Firefox ESR release 45.9. Mozilla NSS was updated to support TLS 1.3 close to release draft and various new ciphers, PRFs, Diffie Hellman key agreement and support for more hashes. Security issues fixed in Firefox bsc1035082 - MFSA 2017-11/CVE-2017-5469: Potenti...
PT-2017-4654
CVE-2025-14715 - CVE-2008-4251: Adobe Flash Player Unvalidated Redirects CVE ID : CVE-2025-14715 Published : Dec. 25, 2025, 11:15 p.m. | 2 hours, 10 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the...
MS16-075 Windows SMB Server Elevation of Privilege Vulnerability (CVE-2016-3225)
Overview As we mentioned a number of times throughout our talk, this work is derived directly from James Forshaw’s BlackHat talk and Google Project Zero research. I highly recommend reviewing both of these resources to anyone interested in pursuing this topic. The idea behind this vulnerability i...
Phabricator: The special code in editor has no Authority control and can lead to Information Disclosure
Here is your keyword:mongoose Details: - Summary: Uploaded file will be showed as a special code Fxxx in Phabricator editor,but it has no Authority control. - Reproduce steps: 1.Open two different browsers to simulate two different users 2.browser A:login as user "toma" 3.browser B:login a user...
UBUNTU-CVE-2017-5339
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
UBUNTU-CVE-2015-4680
FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates...
Design/Logic Flaw
Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5 before CP 1746 mismanages certain key and certificate data. Per IWSVA documentation, by default, IWSVA acts as a private Certificate Authority CA and dynamically generates digital certificates that are sent to client browsers to...
CVE-2017-6339
Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5 before CP 1746 mismanages certain key and certificate data. Per IWSVA documentation, by default, IWSVA acts as a private Certificate Authority CA and dynamically generates digital certificates that are sent to client browsers to...
CVE-2017-6339
CVE-2017-6339 concerns Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746, where the product’s default CA behavior and certificate management allow an authenticated, low-privilege attacker to download the CA certificate and private key (default or uploaded) and decryp...
CVE-2017-6339
Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5 before CP 1746 mismanages certain key and certificate data. Per IWSVA documentation, by default, IWSVA acts as a private Certificate Authority CA and dynamically generates digital certificates that are sent to client browsers to...
CVE-2013-7450
Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations...
Design/Logic Flaw
Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations...
CVE-2013-7450
Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations...
Authentication flaw
The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP traffic to port 23...
CVE-2012-4692
CVE-2012-4692 is rejected/not used per the Initial Description.
Dup Scout Enterprise GET Buffer Overflow
This module exploits a stack-based buffer overflow vulnerability in the web interface of Dup Scout Enterprise versions use exploit/windows/http/dupscts/bof msf undefinedbof show actions ...actions... msf undefinedbof set ACTION msf undefinedbof show options ...show and set options... msf...
GDPR Series, Part 4: The Penalties for Non-Compliance
In the first three parts of this series, we covered the GDPR basics: who is subject to the GDPR requirements, what rules require data protection technology, and how you can start preparing your organization for the regulation. In this final installment, we will cover what happens when you are not...
