17011 matches found
Ubuntu: Security Advisory (USN-3275-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
LabF nfsAxe FTP Client 3.7 Buffer Overflow
!/usr/bin/python print "LabF nfsAxe 3.7 FTP Client Buffer Overflow SEH" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Tested on Windows Vista x86 import socket import sys badchars \x00\x10\x0a buf = "" buf +=...
[slackware-security] kdelibs
New kdelibs packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/kdelibs-4.14.32-i586-1slack14.2.txz: Upgraded. This update fixes a security issue with KAuth that can lead to...
BruteSpray - Brute-Forcing from Nmap output (Automatically attempts default creds on found services)
BruteSpray takes nmap GNMAP output and automatically brute-forces services with default credentials using Medusa. BruteSpray can even find non-standard ports by using the -sV inside Nmap. Usage First do an nmap scan with '-oA nmap.gnmap'. Command: python brutespray.py -h Example: python...
Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-3275-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3275-2 advisory. USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Tenable has extracted the preceding...
USN-3275-2 openjdk-7 vulnerabilities
USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Original advisory details: It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java applicati...
USN-3275-2: OpenJDK 7 vulnerabilities
USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Original advisory details: It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java applicati...
Cerberus FTP 8.0.10.3 MLST Buffer Overflow
!/usr/share/ruby + Title: Cerberus FTP Server 8.0.10.3 a 'MLST' Remote Buffer Overflow + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Metasploit Module Author : Souhardya Sardar + Metasploit Module Author Contact:...
LabF nfsAxe 3.7 FTP Client - Remote Buffer Overflow (SEH)
LabF nfsAxe 3.7 FTP Client - Remote Buffer Overflow SEH !/usr/bin/python print "LabF nfsAxe 3.7 FTP Client Buffer Overflow SEH" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Tested on Windows Vista x86 import socket impor...
LabF nfsAxe 3.7 FTP Client Stack Buffer Overflow
This module exploits a buffer overflow in the LabF nfsAxe 3.7 FTP Client allowing remote code execution. Module Options msf use exploit/windows/ftp/labf/nfsaxe msf undefinednfsaxe show actions ...actions... msf undefinednfsaxe set ACTION msf undefinednfsaxe show options ...show and set options...
U.S. Dept Of Defense: IDOR on DoD Website exposes FTP users and passes linked to all accounts!
Description: https://████/██████/ is vulnerable to Insecure Direct Object Reference. The application does not validate whether or not who a Push Server belongs to thus allowing an attacker to view the credentials of any FTP / sFTP server linked to any user's account. Impact An attacker can view...
Ubuntu 16.04 LTS : OpenJDK 8 vulnerabilities (USN-3275-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3275-1 advisory. It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java...
Ubuntu: Security Advisory (USN-3275-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Trashbilling.com / Trashflow 3.0 XSS / SQL Injection
A blog post with information located here: https://thenopsled.com/trashbilling.html ============ Introduction ============ This was a basic vulnerability analysis of trashbilling.com which I am required to use to pay my trash bill, and Trashflow 3.0, which updates trashbilling.com from the Trash...
Cerberus FTP Server Remote Buffer Overflow Vulnerability (CNVD-2017-08299)
Cerberus FTP Server is an FTP service program. A buffer overflow vulnerability exists in Cerberus FTP Server, which can be exploited by a remote attacker to conduct a buffer overflow attack on the application, which can be used to execute arbitrary code in the application context...
USN-3275-1: OpenJDK 8 vulnerabilities
It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java application to perform actions with the credentials of a different user. CVE-2017-3509 It was discovered that an untrusted library search path fl...
USN-3275-1 openjdk-8 vulnerabilities
It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java application to perform actions with the credentials of a different user. CVE-2017-3509 It was discovered that an untrusted library search path fl...
Very Fast Network Logon Cracker: THC-Hydra
Very Fast Network Logon Cracker Number one of the biggest security holes are passwords, as every password security study shows. Hydra is a parallized login cracker which supports numerous protocols to attack. New modules are easy to add, beside that, it is flexible and very fast. This fast, and...
Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2017-827)
Improper re-use of NTLM authenticated connections Networking, 8163520 : It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this...
OpenJDK: newline injection in the FTP client (Networking, 8170222)
A newline injection flaw was discovered in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a Java application...