my-exploits

my-exploits My public exploit col...

UBUNTU-CVE-2016-4973

Binaries compiled against targets that use the libssp library in GCC for stack smashing protection SSP might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature...

Netgear Now Collects Router 'Analytics Data' — Here’s How to Disable It

Is your router collects data on your network? Netgear last week pushed out a firmware update for its wireless router model NightHawk R7000 with a remote data collection feature that collects router's analytics data and sends it to the company's server. For now, the company has rolled out the...

WikiLeaks Reveals Two CIA Malware Frameworks

WikiLeaks released details on what it claims are two frameworks for malware samples dubbed AfterMindnight and Assassin, both allegedly developed by the U.S. Central Intelligence Agency. The revelations come amid worldwide efforts to squelch variants of the WannaCry ransomware, an offensive hackin...

How to Collect Client VPN Logs for ADC Gateway

This article describes how to collect VPN logs from Windows XP, Windows Vista, Windows 7, or Windows 8 for analyzing VPN connection issues in an ADC Gateway appliance...

Advances in Ad Blocking

Ad blockers represent the largest consumer boycott in human history. They're also an arms race between the blockers and the blocker blockers. This article discusses a new ad-blocking technology that represents another advance in this arms race. I don't think it will "put an end to the ad-blocking...

The CIS Critical Security Controls Explained – Control 6: Maintenance, Monitoring and Analysis of Audit Logs

In your organizational environment, Audit Logs are your best friend. Seriously. This is the sixth blog of the series based on the CIS Critical Security Controls. Ill be taking you through Control 6: Maintenance, Monitoring and Analysis of Audit Logs, in helping you to understand the need to nurtu...

ClipBucket cross-site scripting vulnerability (CNVD-2017-05017)

ClipBucket is an open source video sharing software. The software allows you to share videos to video sites and supports the light off effect when watching a movie. A cross-site scripting vulnerability exists in ClipBucket version 2.7.0.5. A remote attacker can exploit this vulnerability by...

'Events data collection failure' Issue

Challenge Veeam ONE raises Events data collection failure against Veeam Backup & Replication or Hyper-V server. Cause Permissions, UAC configuration, and firewall settings need to be configured. Solution Troubleshooting Checks Verify that the account used to connect to Veeam Backup & Replication ...

"Backup performance data collection failure"

Challenge Veeam ONE raises the Backup performance data collection failure alarm. Example 1 - Performance data cannot be collected from the repository associated with Veeam Backup & Replication. Example 2 - Performance data cannot be collected from a Hyper-V host managed by Veeam Backup &...

Huawei LogCenter Denial of Service Vulnerability

Huawei LogCenter is a set of log management software from Huawei, China. A denial of service vulnerability exists in Huawei LogCenter version V100R001C10, which stems from the program's lack of legitimacy checking of incoming device information data. An attacker can exploit this vulnerability to...

Novell SUSE Linux Enterprise Server/SUSE Linux Enterprise Desktop Code Injection Vulnerability

SuSE Linux Enterprise Server and SUSE Linux Enterprise Desktop are both enterprise server versions of the Linux operating system from the American company Novell. A code injection vulnerability exists in the supportconfig data collection tool in supportutils in Novell SUSE Linux Enterprise Server...

Microsoft Finally Reveals What Data Windows 10 Collects From Your PC

Since the launch of Windows 10, there has been widespread concern about its data collection practices, mostly because Microsoft has been very secretive about the telemetry data it collects. Now, this is going to be changed, as Microsoft wants to be more transparent on its diagnostics data...

Debian DLA-884-1 : collectd security update

It was discovered that there was an infinite loop vulnerability in collectd, a statistics collection and monitoring daemon. When a correct 'Signature part' is received by an instance configured without the AuthFile option, an endless loop occurs in the parsepacket routine due to a missing pointer...

[SECURITY] [DLA 884-1] collectd security update

Package : collectd Version : 5.1.0-3+deb7u3 CVE ID : CVE-2017-7401 Debian Bug : 859494 It was discovered that there was an infinite loop vulnerability in collectd, a statistics collection and monitoring daemon. When a correct "Signature part" is received by an instance configured without the...

Denial of service

Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service...

PT-2017-7461

Name of the Vulnerable Software and Affected Versions Huawei LogCenter version V100R001C10 Description The issue allows an authenticated attacker to add abnormal device information to the log collection module, resulting in a denial of service. Recommendations For Huawei LogCenter version...

CVE-2015-8670: Improper Input Validation

Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service...

Verizon Rebuts Critics of Data-Collecting App

Verizon broke its silence today on what many believed would be a controversial rollout of an app made by Evie Labs called AppFlash, that had been identified by privacy advocates as spyware. The wireless carrier and broadband ISP defended itself Friday saying its critics were flat-out wrong. Veriz...

Verizon to pre-install a 'Spyware' app on its Android phones to collect user data

If the death of online privacy rules wasn't enough for Internet Service Providers and advertisers to celebrate, Verizon has planned to pre-install spyware on customers' Android devices in order to collect their personal data. The telecom giant has partnered with Evie Launcher to bring a new...