KB4022715: Windows 10 Version 1607 and Windows Server 2016 June 2017 Cumulative Update

The remote Windows host is missing security update KB4022715. It is, therefore, affected by multiple vulnerabilities : - Multiple security bypass vulnerabilities exist in Device Guard. A local attacker can exploit these, via a specially crafted script, to bypass the Device Guard Code Integrity...

KB4022725: Windows 10 Version 1703 June 2017 Cumulative Update

The remote Windows 10 version 1703 host is missing security update KB4022725. It is, therefore, affected by multiple vulnerabilities : - Multiple information disclosure vulnerabilities exist in Windows Uniscribe due to improper handling of objects in memory. An unauthenticated, remote attacker ca...

DEBIAN-CVE-2016-10350

The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

Huawei Files User Cabinet Password Brute Force Vulnerability

Huawei Files is a file management APP software on cell phones from Huawei China. Huawei Files is vulnerable to brute-force cracking of the user's confidential cabinet password. Due to improper design of the confidential cabinet key database, an illegal attacker can access the sensitive informatio...

cabinet-auditeco.fr XSS vulnerability

Vulnerable URL: http://www.cabinet-auditeco.fr/fileadmin/styles/auditeco/CA2010Ban468x60v1.swf?clickTAG=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4870612 VIP website status:| N...

Joomla com_filecabinet component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comfilecabinet component. An attacker can exploit the vulnerability to access or modify database data...

NTDS Grabber

This module uses a powershell script to obtain a copy of the ntds,dit SAM and SYSTEM files on a domain controller. It compresses all these files in a cabinet file called All.cab. This module requires Metasploit: https://metasploit.com/download Current source:...

cabinet.megaindex.ru XSS vulnerability

Vulnerable URL: https://cabinet.megaindex.ru/profile Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check cabinet.megaindex.ru SSL...

libarchive: NULL pointer access in CAB parser

A vulnerability was found in libarchive. A specially crafted CAB file could cause the application dereference a NULL pointer, leading to a crash...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Symantec’s AntiVirus Decomposer antivirus protection system is caused by a numerical overflow or buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure memory corruption or execute arbitrary code using a specially crafted CAB file...

libarchive CAB Parser Null Pointer Access Vulnerability

libarchive is a multi-format archive and compression library. A null pointer access vulnerability exists in libarchive's CAB parser. An attacker could exploit this vulnerability to cause a null pointer access...

金钱柜p2p通用系统SQL注入漏洞

No description provided by source...

[SECURITY] Fedora 21 Update: gcab-0.4-7.fc21

gcab is a tool to manipulate Cabinet archive...

[SECURITY] Fedora 20 Update: cabextract-1.5-1.fc20

cabextract is a program which can extract files from cabinet .cab archives...

[SECURITY] Fedora 21 Update: cabextract-1.5-1.fc21

cabextract is a program which can extract files from cabinet .cab archives...

CVE-2014-5421

CareFusion Pyxis SupplyStation 8.1 with hardware test tool 1.0.16 and earlier has a hardcoded database password, which makes it easier for local users to gain privileges by leveraging cabinet access...

Hardcoded credentials

CareFusion Pyxis SupplyStation 8.1 with hardware test tool 1.0.16 and earlier has a hardcoded database password, which makes it easier for local users to gain privileges by leveraging cabinet access...

cabextract: Multiple vulnerabilities

Background cabextract is free software for extracting Microsoft cabinet files. Description Multiple vulnerabilities have been discovered in cabextract. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially-crafted archive ...

Sentry Switched CDU Bruteforce Login Utility

This module scans for ServerTech's Sentry Switched CDU Cabinet Power Distribution Unit web login portals, and performs login brute force to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

Chinese hackers infiltrate Indian Defence Research Organisation

According to an exclusive report published today by DNA news, the computers of highly sensitive Defence Research and Development Organisation DRDO have reportedly been hacked by Chinese hackers as biggest security breach in the Indian Defence ever. Infiltrate leading to the leak of thousands of t...