8272 matches found
jSQL Injection v0.77 - Java application for automatic SQL database injection
jSQL Injection is a lightweight application used to find database information from a distant server. It's is free , open source and cross-platform Windows, Linux, Mac OS X. jSQL Injection is also part of the official penetration testing distribution Kali Linux and is included in distributions lik...
cURL/libcURL Security Bypass Vulnerability (CNVD-2016-10793)
cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL/libcURL due to a "" ending in an illegal url, which allows attackers to bypass security restrictions and perform unauthorized...
RecuperaBit - A Tool For Forensic File System Reconstruction
A software which attempts to reconstruct file system structures and recover files. Currently it supports only NTFS. RecuperaBit attempts reconstruction of the directory structure regardless of: missing partition table unknown partition boundaries partially-overwritten metadata quick format You ca...
[SECURITY] Fedora 24 Update: 389-ds-base-1.3.5.15-1.fc24
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
CVE-2016-6430
A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. More Information: CSCva38636. Known Affected Releases: 4.101. Known Fixed...
CVE-2016-6430
A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. More Information: CSCva38636. Known Affected Releases: 4.101. Known Fixed...
Design/Logic Flaw
A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. More Information: CSCva38636. Known Affected Releases: 4.101. Known Fixed...
Moderate: Red Hat Security Advisory: pcs security, bug fix, and enhancement update
An update for pcs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
SOL61045143 - Configuration utility CSRF vulnerability
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
BinProxy - BinProxy is a proxy for arbitrary TCP connections
BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem. Installation Prerequisites Ruby 2.3 or later A C compiler, Ruby headers, etc., are needed to compile several dependencies. On Ubuntu, sudo apt install build-essential ruby-dev should do...
Cisco IP Interoperability and Collaboration System Command-Line Interface Privilege Escalation Vulnerability
A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. The vulnerability is due to insufficient input validation. An attacker could...
Cisco Patches Critical Vulnerability in Facility Events Response System
Cisco Systems issued a security bulletin Wednesday for a critical vulnerability found in its IP Interoperability and Collaboration System IPICS. The feature is a key part of a mechanism used by Cisco to facilitate emergency responses for “facility events.” The vulnerability CVE-2016-6397, accordi...
Cisco IP Interoperability and Collaboration System Command-Line Interface Privilege Escalation Vulnerability
A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. The vulnerability is due to insufficient input validation. An attacker could...
SUSE SLED12 / SLES12 Security Update : kdump (SUSE-SU-2016:2553-1)
This update for kdump provides several fixes and enhancements : - Refresh kdumprd if /etc/hosts or /etc/nsswitch.conf is changed. bsc943214 - Add a separate systemd service to rebuild kdumprd at boot. bsc943214 - Improve network setup in the kdump environment by reading configuration from wicked ...
rhscon-ceph: password leak by command line parameter
A flaw was found in the way authentication details were passed between rhscon-ceph and rhscon-core. An authenticated, local attacker could use this flaw to recover the cleartext password...
SUSE-SU-2016:2553-1 Security update for kdump
This update for kdump provides several fixes and enhancements: - Refresh kdumprd if /etc/hosts or /etc/nsswitch.conf is changed. bsc943214 - Add a separate systemd service to rebuild kdumprd at boot. bsc943214 - Improve network setup in the kdump environment by reading configuration from wicked b...
CVE-2003-0583
Buffer overflow in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument...
[SECURITY] Fedora 23 Update: xen-4.5.5-2.fc23
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...