Disk Sorter Enterprise 9.5.12 - Local Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc + Title: Disk Sorter Server v9.5.12 - Local Stack-based buffer overflow + Credits / Discovery: Nassim Asrir + Author Email: email protected || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE: N/A Vendor:...

CentOS 6 : libguestfs (CESA-2017:0564)

An update for libguestfs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Disk Sorter Server 9.5.12 Buffer Overflow

Title: Disk Sorter Server v9.5.12 - Local Stack-based buffer overflow + Credits / Discovery: Nassim Asrir + Author Email: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE: N/A Vendor: =============== http://www.disksorter.com/ Download:...

libguestfs, ocaml, perl, python, ruby security update

CentOS Errata and Security Advisory CESA-2017:0564 An update for libguestfs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Fedora 25 : cloud-init (2017-837115524e)

This update fixes a systemd service ordering issue in cloud-init and backports a fix for a security issue in which instances run in EC2 write IAM instance profile credentials to disk. To work around the security issue without updating cloud-init, wait at least six hours between creating a bundle ...

Disk Sorter Enterprise 'GET' Buffer Overflow Vulnerability

Flexense Disk Sorter Enterprise is a file categorization solution from Flexense USA. The solution supports file classification to disk, directory, network share and NAS storage devices and performs advanced historical trending operations. A buffer overflow vulnerability exists in Disk Sorter...

Buffer overflow

A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request...

CVE-2017-7230

A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request...

CVE-2017-7230

A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request...

CVE-2017-7230

CVE-2017-7230 affects Disk Sorter Enterprise v9.5.12 and earlier. The vulnerability is a stack-based buffer overflow in the web interface caused by improper bounds checking of the HTTP GET request path, enabling remote attackers to execute arbitrary code. Exploit tooling exists (e.g., Metasploit ...

CVE-2017-7230

A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request...

Moderate: Red Hat Security Advisory: libguestfs security and bug fix update

An update for libguestfs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Personalized User Focused Security: Stethoscope

Stethoscope is a web application that collects information from existing device data sources e.g., JAMF or LANDESK on a given user’s devices and gives them clear and specific recommendations for securing their systems. Stethoscope consists of two primary pieces: a Python-based back-end and a...

SUSE SLES11 Security Update : open-vm-tools (SUSE-SU-2017:0705-1)

This update for open-vm-tools to 10.1.0 stable brings features, fixes bugs and security issues : - New vmware-namespace-cmd command line utility - GTK3 support - Common Agent Framework CAF - Guest authentication with xmlsec1 - Sub-command to push updated network information to the host on demand ...

Disk Savvy Enterprise long URI in GET request buffer overflow

Added: 03/16/2017 CVE: CVE-2017-6187 BID: 96401 Background Disk Savvy Enterprise is a disk space usage analyzer. Problem A buffer overflow in the built-in web server in Disk Savvy Enterprise could allow remote code execution when handling a long URI in a GET request. Resolution Contact the vendor...

Disk Savvy Enterprise long URI in GET request buffer overflow

Added: 03/16/2017 CVE: CVE-2017-6187 BID: 96401 Background Disk Savvy Enterprise is a disk space usage analyzer. Problem A buffer overflow in the built-in web server in Disk Savvy Enterprise could allow remote code execution when handling a long URI in a GET request. Resolution Contact the vendor...

Disk Savvy Enterprise long URI in GET request buffer overflow

Added: 03/16/2017 CVE: CVE-2017-6187 BID: 96401 Background Disk Savvy Enterprise is a disk space usage analyzer. Problem A buffer overflow in the built-in web server in Disk Savvy Enterprise could allow remote code execution when handling a long URI in a GET request. Resolution Contact the vendor...

SUSE SLED12 / SLES12 Security Update : open-vm-tools (SUSE-SU-2017:0701-1)

This update for open-vm-tools to 10.1.0 stable brings features, fixes bugs and security issues : - New vmware-namespace-cmd command line utility - GTK3 support - Common Agent Framework CAF - Guest authentication with xmlsec1 - Sub-command to push updated network information to the host on demand ...

Information : XenApp/XenDesktop Performance Counters

1. CitrixBrokerService 1. Application Cache Writes 2. Brokered Sessions 3. Database Avg. Transaction Time 4. Database Connected 5. Database Transaction Errors/sec 6. Database Transaction/sec 7. Deregistration Requests 8. Expired Launches/sec 9. Expired Registrations 10. Expired Registration/sec...

Apache Struts Jakarta Multipart Parser OGNL Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Apache Struts Jakarta Multipart Parser OGNL Injection', 'Description' = %q This module exploits a remote code execution...