CVE-2017-8515

CVE-2017-8515 affects Microsoft Windows 10 versions 1511, 1607, and 1703, and Windows Server 2016. The vulnerability allows an unauthenticated, local attacker to send a specially crafted kernel-mode request to trigger a denial of service on the target system (Windows VAD Cloning Denial of Service...

Windows VAD Cloning Denial of Service Vulnerability

A denial of service vulnerability exists in Microsoft Windows when an unauthenticated attacker sends a specially crafted kernel mode request. An attacker who successfully exploited this vulnerability could cause a denial of service on the target system, causing the machine to either stop respondi...

Generating SSH Keys is broken (using Bitbucket Server) -- ui and config file

Please watch my short video illustrating the experience. https://www.youtube.com/watch?v=wPUAkG78BFE&feature=youtu.be Scenario 1: On MacOS X Sierra when setting up SourceTree for first time and choosing "SSH" as the authentication method, SourceTree: Should not have a URL for the Bitbucket...

Envoy: Primary Cloning of Envoy web application resulting confidential information disclosure

It is possible to mirror envoy website which exposes internal structure as also client side java-script and CSS . When an attacker makes a copy of your webpages on their local machine, it is possible scan the code for vulnerabilities to exploit without generating additional traffic on your web...

Product update: Virtuozzo 7.0 Update 3

The new packages for Virtuozzo 7.0 introducing new features and bug fixes. Vulnerability id: PSBM-56838 Kernel panic when creating ploops on NVMe devices. Vulnerability id: PSBM-56668 HWIDs could not be obtained for SGI UV 1000 nodes. Vulnerability id: PSBM-56667 vzlicview could incorrectly detec...

Docebo LMS v6.9 - (Clone Links) Persistent Vulnerability

Document Title: =============== Docebo LMS v6.9 - Clone Links Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1878 Release Date: ============= 2016-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 187...

Docebo LMS v6.9 - (Clone Links) Persistent Vulnerability

Document Title: =============== Docebo LMS v6.9 - Clone Links Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1878 Release Date: ============= 2016-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 187...

Important: Red Hat Security Advisory: CFME 5.6.3 security, bug fix, and enhancement update

An update is now available for Red Hat CloudForms 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

Microsoft Windows - VHDMP Arbitrary Physical Disk Cloning Privilege Escalation (MS16-138) Exploit

Exploit for windows platform in category local exploits / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=916 Windows: VHDMP Arbitrary Physical Disk Cloning EoP Platform: Windows 10 10586. No idea about 14393, 7 or 8.1 versions. Class: Elevation of Privilege Summary: The VHDMP...

Microsoft Windows - VHDMP Arbitrary Physical Disk Cloning Privilege Escalation (MS16-138)

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=916 Windows: VHDMP Arbitrary Physical Disk Cloning EoP Platform: Windows 10 10586. No idea about 14393, 7 or 8.1 versions. Class: Elevation of Privilege Summary: The VHDMP driver doesn’t open physical disk drives securely when...

FOG Server Detection

Detection of FOG Server The script sends a connection request to the server and attempts to detect the presence of FOG Server and to extract its version SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

GATTacker - BLE (Bluetooth Low Energy) Man-in-the-Middle

A Node.js package for BLE Bluetooth Low Energy security assessment using Man-in-the-Middle and other attacks. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install npm install gattacker Usage Configure Running both components Set up variables in...

King Phisher 1.5.2 - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...

Researcher Proves Viability of NAND Mirroring to Bypass iPhone Passcode Restrictions

NAND mirroring was outright dismissed by FBI director James Comey as a means of breaking into San Bernardino terrorist Syed Farook’s iPhone 5c during the government’s spat with Apple earlier this year. “It doesn’t work,” Comey said. Well, turns out, it does. Sergei Skorobogatov of the University ...

PHP 7.0 Object Cloning Denial Of Service

obj = clone $this; return $this-obj; $obj = new MyCloneableClass; $obj2 = clone $obj; ?...

PHP 7.0 - Object Cloning Local Denial of Service

Exploit for php platform in category dos / poc obj = clone $this; return $this-obj; $obj = new MyCloneableClass; $obj2 = clone $obj; ? 0day.today 2018-02-15...

PHP 7.0 - Object Cloning Local Denial of Service

obj = clone $this; return $this-obj; $obj = new MyCloneableClass; $obj2 = clone $obj; ?...

PHP 7.0 - Object Cloning Local Denial of Service

PHP 7.0 - Object Cloning Local Denial of Service obj = clone $this; return $this-obj; $obj = new MyCloneableClass; $obj2 = clone $obj; ?...

Mailbox fishing those things: the Chrome address reverse vulnerability use cases-vulnerability warning-the black bar safety net

First talk about the recently seen one of the more interesting vulnerability, the Google browser chrome address inversion, later we'll said. One day, your mailbox has received an incredible message that may come from your boss or your best friend, do not feel strange, it is likely that you are...

Car Thieves Can Unlock 100 Million Volkswagens With A Simple Wireless Hack

In Brief Some 100 Million cars made by Volkswagen are vulnerable to a key cloning attack that could allow thieves to unlock the doors of most popular cars remotely through a wireless signal, according to new research. Next time when you leave your car in a parking lot, make sure you don't leave...