8261 matches found
PostgreSQL Database Name Command Line Flag Injection
This module can identify PostgreSQL 9.0, 9.1, and 9.2 servers that are vulnerable to command-line flag injection through CVE-2013-1899. This can lead to denial of service, privilege escalation, or even arbitrary code execution. This module requires Metasploit: https://metasploit.com/download...
[SECURITY] Fedora 18 Update: 389-ds-base-1.3.0.5-1.fc18
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
[360-FAAR v0.4.1] Firewall Analysis Audit And Repair
360-FAAR Firewall Analysis Audit and Repair is an offline, command line, Perl firewall policy manipulation tool to filter, compare to logs, merge, translate and output firewall commands for new policies, in Checkpoint dbedit, Cisco ASA or ScreenOS commands, and its one file! Changes: This release...
[Hash Kracker Console] Tool to find out the password from the Hash
Hash Kracker Console is the all-in-one command-line tool to find out the password from the Hash. Currently it supports password recovery from following popular Hash types MD5 SHA1 SHA256 SHA384 SHA512 Also it offers 4 types of Password Recovery methods based on the complexity of password Dictiona...
[SECURITY] Fedora 17 Update: euca2ools-2.1.3-1.fc17
Euca2ools are command line tools used to interact with Eucalyptus, a service overlay designed to be interface-compatible with Amazon Web Services AWS, as well as AWS itself...
[SECURITY] Fedora 18 Update: euca2ools-2.1.3-1.fc18
Euca2ools are command line tools used to interact with Eucalyptus, a service overlay designed to be interface-compatible with Amazon Web Services AWS, as well as AWS itself...
Gaming Platforms as an attack vector against remote systems
Little more than a year ago I wrote about the possibility to attack gaming platform to compromise large audience of gamers in stealthy way, the access to millions of machines represent a dream for every attackers and I hypnotized its repercussion in cyber warfare domains. Gaming platform are...
[SSL Certificate Downloader] Command-line Tool to grab SSL Certificate from Server Remotely
SSL Cert Downloader is a free command-line tool to grab SSL certificate from server remotely. It can be used to download certificate from any of the SSL enabled services including HTTPS 443 LDAPS 636 SMTPS 465 POPS 995 IMAPS 993 You can either specify IP address or host name of the server. Also y...
Fedora Update for isync FEDORA-2013-2758
Check for the Version of isync OpenVAS Vulnerability Test Fedora Update for isync FEDORA-2013-2758 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
[SECURITY] Fedora 18 Update: isync-1.0.6-1.fc18
isync is a command line application which synchronizes mailboxes; currently Maildir and IMAP4 mailboxes are supported. New messages, message deletions and flag changes can be propagated both ways. isync is suitable for use in IMAP-disconnected mode...
java-1_7_0-openjdk: update to 2.3.6 (critical)
java-170-openjdk was updated to icedtea-2.3.6 bnc803379 containing various security and bugfixes: Security fixes - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name or value given at constructi...
[RemoteDLLInjector] Command-line Tool to Inject DLL into Remote Process
Remote DLL Injector is the free command-line tool to Inject DLL into remote process. Currently it supports DLL injection using the CreateRemoteThread technique. If you are looking for advanced and more user friendly GUI version then check out our popular RemoteDll tool. Being a command-line tool...
Important: Red Hat Security Advisory: JBoss Enterprise SOA Platform 5.3.1 update
JBoss Enterprise SOA Platform 5.3.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS...
JBoss: twiddle.sh accepts credentials as command line arguments, exposing them to other local users via a process listing
twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments...
Design/Logic Flaw
The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System ACS, Application Networking Manager ANM, Prime LAN Management Solution LMS, Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Netwo...
CVE-2013-1125
The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System ACS, Application Networking Manager ANM, Prime LAN Management Solution LMS, Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Netwo...
Multiple Cisco Products Root Shell Access Vulnerability
Multiple Cisco products contain a vulnerability that could allow a local attacker to gain shell access with root privileges. The vulnerability is due to incorrect validation of user-supplied input processed by the command-line interface CLI on Cisco products running the affected software. A local...
SOL14201 - BIND denial-of-service attack CVE-2012-5166/CVE-2012-4244
Recommended Action To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. To mitigate this vulnerability, you can disable recursion of the DNS server. To do so, perform the following procedure: Impact of action...
Adobe Reader *.PDF command line execution exploit
I reported this problem to Adobe. If this error will be not corrected to Easter Holidays i will provide exploit on my YT channel. vulnerability found by BTD-C exploit coded by BTD-C http://zabawny.net/minifilm/hexvalue.txt 0day.today 2018-01-05...