4136 matches found
Threat actors leverage EternalBlue exploit to deliver non-WannaCry payloads
The “EternalBlue” exploit MS017-010 was initially used by WannaCry ransomware and Adylkuzz cryptocurrency miner. Now more threat actors are leveraging the vulnerability in Microsoft Server Message Block SMB protocol – this time to distribute Backdoor.Nitol and Trojan Gh0st RAT. FireEye Dynamic...
Home Web Server 1.9.1 (build 164) - Remote Code Execution
Exploit Title: Home Web Server 1.9.1 build 164 - CGI Remote Code Execution Date: 26/05/2017 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: http://downstairs.dnsalias.net/ does not exist...
Exploit for Code Injection in Samba
Basic Setup Install Samba version 4.5.9 https://download...
Update Rollup 13 for System Center 2012 R2 Data Protection Manager
Update Rollup 13 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Data Protection Manager. It also contains the installation instructions for this update. Note Existing Data...
How to Attach Additional Disk to NetScaler MAS 12.0
Citrix ADM, formerly NetScaler MAS The article describes how to attach an additional disk to NetScaler MAS 12.0 and lower versions. Points to Note You can only add one additional disk to NetScaler MAS apart from the default 120 GB disk. Adding more than one additional disk is not supported. The...
HandBrake for Mac Compromised with Proton Spyware
The handlers of the open source HandBrake video transcoder are warning anyone who recently downloaded the Mac version of the software that they’re likely infected with malware. HandBrake warned users on Saturday of a compromise of one of its mirror download servers, and said anyone who grabbed th...
Website of Popular Mac Software Hacked to Spread Malware
If you have recently downloaded the popular open source video transcoder app HandBrake on your Mac, there are chances that your computer is infected with a notorious Remote Access Trojan RAT. The HandBrake team issued a security alert on Saturday, warning Mac users that one of its mirror servers ...
Targeted WPA2-Enterprise Evil Twin Attacks: eaphammer
Targeted WPA2-Enterprise Evil Twin Attacks EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on providing an easy-to-use interface that...
Demo to configure profile management through HDX policies
If you want to test to configure Citrix UPM ,you feel confused about the detail steps.This article will guide you one by one...
Bosch automotive Drivelog Connector dongle remote vulnerability analysis-vulnerability warning-the black bar safety net
In this article, we will be on the Argus research team at Bosch Drivelog Connect BOD-II adapter in the discovery of the vulnerability is discussed in detail. Note that this vulnerability would allow an attacker to by Drivelog platform to stop a running car engine. According to the Argus of the...
Fedora 25 : tcpreplay (2017-5e945de883)
Here is what is fixed in this release : - Fix reporting of rates 1Mbps 348 - Option --unique-ip not working properly 346 ---- Features and fixes include : - MAC rewriting capabilities by Pedro Arthur 313 - Fix several issues identified by Coverity 305 - Packet distortion --fuzz-seed option by...
CVE-2017-7262
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service system hang via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite...
CVE-2017-7262
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service system hang via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite...
Design/Logic Flaw
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service system hang via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite...
CVE-2017-7262: Improper Input Validation
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service system hang via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite...
CVE-2017-7262
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service system hang via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite...
PT-2017-17620
Name of the Vulnerable Software and Affected Versions AMD Ryzen processor with AGESA microcode through 2017-01-27 Description The issue allows local users to cause a denial of service, resulting in a system hang, by executing a long series of FMA3 instructions. This can be demonstrated using the...
CVE-2017-6481
Multiple Cross-Site Scripting XSS issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages instructions in app/admin/instructions/preview.php; subnetId in app/admin/powerDNS/refresh-ptr-records.php. An attacker...
PT-2017-17098
Name of the Vulnerable Software and Affected Versions phpipam version 1.2 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerab...
HEVD kernel vulnerability training-with Windows play-bug warning-the black bar safety net
For this training of the research study will kernel vulnerability principle, the use of the way, under Windows many common data structures have a preliminary understanding, from the open Ring0 gate. HEVD project address: https://github.com/hacksysteam/HackSysExtremeVulnerableDriver For the kernel...