8272 matches found
Microsoft Internet Explorer Information Disclosure (MS16-084 : CVE-2016-3277)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer while handling unsafe command line parameters. A remote attacker can exploit this issue by enticing a user to open a specially crafted...
The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to execute arbitrary code.
The vulnerability of the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT command-line graphic editors based on ImageMagick exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using metasymbols within a speciall...
Detect Shared Passwords: shard
A command line tool to detect shared passwords List available modules: $ java -jar shard-1.0.jar -l Available modules: Facebook LinkedIn Reddit Twitter Instagram Given a username and password shard will attempt to authenticate with multiple sites: $ java -jar shard-1.0.jar -u -p - Tried credentia...
The vulnerability of Juniper SRX 240 router microprogramming software, which allows a hacker to trigger a maintenance failure.
The Juniper SRX 240 router software contains a vulnerability that allows any user registered in the system and having remote access to the device to trigger a situation that causes resource exhaustion overloading of memory, loading of the processor. The vulnerability is related to the search for...
CVE-2016-1394
Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password, aka Bug ID CSCuz56238...
Katastrophe - Command Line Tool to download torrents from Kickass Torrents
A Command-Line Interface for scraping Kickass torrents kat.cr. Provides options to scrape top torrents in given categories, or searching for specific torrents. The user can select single, multiple or even specify a range for the torrent to download from any category. Installation Using pip $ pip...
Command Line Certificate Examination Utility: certigo
Command Line Certificate Examination Utility Certigo is a utility to examine and validate certificates in a variety of formats. Install To install certigo, simply use: go get -u github.com/square/certigo Note that certigo requires Go 1.6 or later to build. Usage Certigo can read...
Locky is Back Asking for Unpaid Debts
On June 21, 2016, FireEye’s Dynamic Threat Intelligence DTI identified an increase in JavaScript contained within spam emails. FireEye analysts determined the increase was the result of a new Locky ransomware spam campaign. As shown in Figure 1, Locky spam activity was uninterrupted until June 1,...
[SECURITY] Fedora 23 Update: xen-4.5.3-8.fc23
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Palo Alto Networks PAN-OS 7.0.7 Multiple Vulnerabilities
The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.7. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the passive firewall where a VM-series ESXi configuration processes and forwards traffic. No other details are available. - An unspecified...
Blat 3.2.14 - Stack Overflow
Vulnerable Product Version: Blat v3.2.14 Link: blat.net 2. Vulnerability Information Impact: Attacker may gain administrative access / can perform a DOS Remotely Exploitable: No Locally Exploitable: May be possible 3. Product Details An open source Windows 32 & 64 bit command line SMTP mailer...
Oracle Orakill.exe 11.2.0 - Buffer Overflow
Exploit for windows platform in category dos / poc ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ORACLE-ORAKILL.EXE-BUFFER-OVERFLOW.txt + ISR: apparitionsec Vendor: ============== www.oracle.com Product: ===================...
Cisco Aironet Access Points Command-Line Interpreter Linux Shell Command Injection Vulnerability
A vulnerability in the command-line interpreter of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an authenticated, local attacker to inject commands in the Linux shell. The commands could be executed with root-level privileges. The vulnerability is due to improper sanitizati...
CVE-2016-1403
CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005...
IBM WebSphere DataPower XC10 Buffer Overflow Vulnerability
IBM WebSphere DataPower XC10 is a caching platform from IBM in the United States. The platform allows distributed caching of data with little or no change to existing applications. A buffer overflow vulnerability exists in the CLI of IBM WebSphere DataPower XC10 version 2.1 and 2.5. An attacker...
[SECURITY] Fedora 24 Update: xen-4.6.1-10.fc24
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 23 Update: xen-4.5.3-5.fc23
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 22 Update: xen-4.5.3-5.fc22
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
