Oracle Java SE Hotspot JSR 292 Method Handles RCE

The version of Oracle Java SE or Java for Business installed on the remote host is affected by an arbitrary code execution vulnerability in the Hotspot subcomponent due to an unsafe implementation of the Reflection API, which improperly processes JSR 292 method handles due to a lack of enforcemen...

CVE-2 0 1 6-0 6 3 6 vulnerability analysis-vulnerability warning-the black bar safety net

0x00 vulnerability profile Vulnerability number: CVE-2 0 1 6-0 6 3 6, this vulnerability is a security researcher Adam Gowdiak in 2 0 1 3 report to the Oracle of the vulnerability, CVE-2 0 1 3-5 8 3 8 the variants. Due to the Oracle on the part of the code in the branch not for the vulnerability ...

Emergency Java Patch Re-Issued for 2013 Vulnerability

Oracle yesterday released an emergency patch for a Java vulnerability that was improperly patched in 2013. Researchers at Security Explorations in Poland two weeks ago disclosed that a Java patch for an issue the company reported in 2013, CVE-2013-5838, was still trivially exploitable, and it...

Microsoft Windows 8.1 / 10 (x86) - Secondary Logon Standard Handles Missing Sanitization Privilege E

Exploit for windows platform in category local exploits / Sources: https://bugs.chromium.org/p/project-zero/issues/detail?id=687 https://googleprojectzero.blogspot.ca/2016/03/exploiting-leaked-thread-handle.html Windows: Secondary Logon Standard Handles Missing Sanitization EoP Platform: Windows...

HackerOne: Sending emails (via HackerOne) impersonating other users

Hello, This was a very weird behavior that I observed and I am not sure exactly what is causing this but I trust you guys to dig into this more. So, basically in a sandboxed program, when I set a trigger for an auto-response, I am getting emails from the HackerOne platform as a user who has no...

Microsoft Windows Assisted Login Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Assisted Login Service for Microsoft Windows, which arises from a program's failure to properly manage request handles in memory. A local attacker...

Microsoft Windows Privilege Elevation Vulnerability (CNVD-2016-01581)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows, which arises from a program's failure to properly clear handles in memory. An attacker could exploit the vulnerability to run arbitra...

PT-2016-1395

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 Description The Secondary Logon Service in Microsoft Windows do...

MS16-032: Security update for Secondary Logon to address elevation of privilege: March 8, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege if the Windows Secondary Logon Service fails to properly manage request handles in memory.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if...

curl: incorrect handle duplication after COPYPOSTFIELDS

A flaw was found in the way the libcurl library performed the duplication of connection handles. If an application set the CURLOPTCOPYPOSTFIELDS option for a handle, using the handle's duplicate could cause the application to crash or disclose a portion of its memory...

Microsoft Windows - NtCreateLowBoxToken Handle Capture Local Denial of Service Privilege Escalation (MS15-111)

Microsoft Windows - NtCreateLowBoxToken Handle Capture Local Denial of Service Privilege Escalation MS15-111 Source: https://code.google.com/p/google-security-research/issues/detail?id=483 Windows: NtCreateLowBoxToken Handle Capture Local DoS/Elevation of Privilege Platform: Windows 8.1 Update,...

Microsoft Windows - NtCreateLowBoxToken Handle Capture Local Denial of Service / Privilege Escalation (MS15-111)

Source: https://code.google.com/p/google-security-research/issues/detail?id=483 Windows: NtCreateLowBoxToken Handle Capture Local DoS/Elevation of Privilege Platform: Windows 8.1 Update, Windows 10, Windows Server 2012 Class: Local Dos/Elevation of Privilege Summary: The NtCreateLowBoxToken API...

Oracle: Security Advisory (ELSA-2011-0498)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

curl, libcurl security update

CentOS Errata and Security Advisory CESA-2015:1254 Updated curl packages that fix multiple security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common...

CVE-2014-5352

The krb5gssprocesscontexttoken function in lib/gssapi/krb5/processcontexttoken.c in the libgssapikrb5 library in MIT Kerberos 5 aka krb5 through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to...

Ubuntu 14.04 LTS : Kerberos vulnerabilities (USN-2498-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2498-1 advisory. It was discovered that Kerberos incorrectly sent old keys in response to a -randkey -keepold request. An authenticated remote attacker could use this iss...

Symantec-Endpoint-Protection-11.x,-12.x

Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow http://www.offensive-security.com Tested on Windows 7 http://www.offensive-security.com/vulndev/symantec-endpoint-protection-0day/ Authors: Matteo ryujin Memelli Alexandru sickness Uifalvi offensive-security.com from ctypes import fro...

USN-2399-1 curl vulnerability

Symeon Paraschoudis discovered that curl incorrectly handled memory when being used with CURLOPTCOPYPOSTFIELDS and curleasyduphandle. This may result in sensitive data being incorrectly sent to the remote server...

Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow Exploit

Exploit for windows platform in category local exploits from ctypes import from ctypes.wintypes import import struct, sys, os, time ntdll = windll.ntdll kernel32 = windll.kernel32 TH32CSSNAPPROCESS = 0x02 PROCESSALLACCESS = 0x1fffff FORMATMESSAGEFROMSYSTEM = 0x00001000 NULL = 0x0 MEMCOMMIT =...

Symantec Endpoint Protection 11.x / 12.x Kernel Pool Overflow

Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow http://www.offensive-security.com Tested on Windows 7 http://www.offensive-security.com/vulndev/symantec-endpoint-protection-0day/ Authors: Matteo 'ryujin' Memelli & Alexandru 'sickness' Uifalvi offensive-security.com from ctypes impo...