7762 matches found
[SECURITY] Fedora 25 Update: sqlite-3.14.2-3.fc25
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
Invoke-CradleCrafter - PowerShell Remote Download Cradle Generator and Obfuscator
Invoke-CradleCrafter is a PowerShell v2.0+ compatible PowerShell remote download cradle generator and obfuscator. Purpose Invoke-CradleCrafter exists to aid Blue Teams and Red Teams in easily exploring, generating and obfuscating PowerShell remote download cradles. In addition, it helps Blue Team...
The return of Mamba ransomware
At the end of 2016, there was a major attack against San Francisco's Municipal Transportation Agency. The attack was done using Mamba ransomware. This ransomware uses a legitimate utility called DiskCryptor for full disk encryption. This month, we noted that the group behind this ransomware has...
EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1154)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be...
EulerOS 2.0 SP2 : kernel (EulerOS-SA-2017-1155)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be...
NetScaler SD-WAN Troubleshooting Guide
Citrix SD-WAN, formerly NetScaler SD-WAN This articles helps you diagnose, troubleshoot, and resolve common issue encountered on NetScaler SD-WAN. Note : This is a master overview article. The detailed information for each topic is covered in its individual articles. CTX236987 - Information to Ke...
kernel: ext4: power failure during write(2) causes on-disk information leak
A vulnerability was found in the Linux kernel where filesystems mounted with data=ordered mode may allow an attacker to read stale data from recently allocated blocks in new files after a system 'reset' by abusing ext4 mechanics of delayed allocation...
Denial Of Service (DoS) Through Disk Consumption
Moodle is vulnerable to denial of service DoS attacks. A malicious user with the guest role can create multiple big drafts with the Atto module's editor-autosave feature to cause the system to run out of disk space...
[SECURITY] Fedora 24 Update: sqlite-3.13.0-2.fc24
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
Authentication flaw
AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan inside disk image aka DMG files...
CVE-2017-9977
CVE-2017-9977 affects AVG AntiVirus for MacOS where the scan engine before 4668 may fail to scan inside disk image (DMG) files, allowing remote attackers to bypass malware detection. Root cause is the failure to scan inside DMG archives, resulting in an integrity gap where malware could evade det...
Dr0p1t Framework 1.3 - A Framework That Creates An Advanced FUD Dropper With Some Tricks
Have you ever heard about trojan droppers ? In short dropper is type of trojans that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks! Features Generated executable properties: The executable size is smaller compar...
How to resolve "Failed to probe partitions from virtual disk" error while importing an OS Layer
When importing an OS layer, you get this error: Failed to attach the disk /mnt/repository/Unidesk/OsImport Disks/Windows 10.vhd. Failed to probe partitions from virtual disk This is most often seen when importing a XenServer Windows 10 Gold VM that was exported as an OVF. However, it could happen...
June 27, 2017—KB4022720 (Preview of Monthly Rollup)
None None...
[SECURITY] Fedora 24 Update: glibc-2.23.1-12.fc24
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...
[SECURITY] Fedora 25 Update: glibc-2.24-8.fc25
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...
Microsoft Windows - IOCTL_DISK_GET_DRIVE_GEOMETRY_EX Kernel partmgr Pool Memory Disclosure Exploit
Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1156&desc=2 We have discovered that the handler of the IOCTLDISKGETDRIVEGEOMETRYEX IOCTL in partmgr.sys discloses portions of uninitialized pool memory to user-mode clients, due ...
Open Source Full Featured Network Operating System: OpenSwitch
Open Source Full Featured Network Operating System OpenSwitch provides a fully-featured L2/L3 control plane stack, traditional and programmatic, declarative control plane. The 24×7 nature of global digital economy and the explosion of data have changed how we think about data center networking...
Disk Pulse Local Buffer Overflow Vulnerability
Disk Pulse Enterprise is a real-time disk monitoring tool. A local buffer overflow vulnerability exists in Disk Pulse Enterprise version 9.7.26, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, potentially also resulting in a denial of...
