CVE-2015-0665

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173...

PT-2015-4792

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 4.0.00051 and earlier Description The issue allows local users to write to arbitrary files via crafted IPC messages. Recommendations For Cisco AnyConnect Secure Mobility Client version 4.0.00051...

CVE-2015-0663: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392...

CVE-2015-0665: Improper Limitation of a Pathname to a Restricted Directory

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173...

CVE-2015-0662: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to gain privileges via crafted IPC messages that trigger use of root privileges for a software-package installation, aka Bug ID CSCus79385...

PT-2015-4790

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 4.0.00051 and earlier Description The issue is related to improper implementation of access control for IPC messages, allowing local users to write to arbitrary files via crafted messages...

PT-2015-4789

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 4.0.00051 and earlier Description The issue allows local users to gain privileges via crafted IPC messages, triggering the use of root privileges for software-package installation. Recommendation...

Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability

A vulnerability in the inter-process communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to execute arbitrary code with elevated privileges. The vulnerability is due to unauthenticated IPC commands which allow software installation as...

Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability

A vulnerability in the inter-process communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to execute arbitrary code. The vulnerability is due to a lack of input sanitization of certain IPC commands. An attacker could exploit this...

Cisco AnyConnect Secure Mobility Client Hostscan Path Traversal Vulnerability

A vulnerability in the inter-process communication IPC channel of the Cisco AnyConnect Secure Mobility Client Hostscan module could allow an authenticated, local attacker to write and overwrite arbitrary files with elevated privileges. The vulnerability is due to insufficient path traversal...

RHEL 6 : kernel (RHSA-2015:0284)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.5 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

kernel: ipc: ipc_rcu_putref refcount races

A flaw was found in the way the ipcrcuputref function in the Linux kernel's IPC implementation handled reference counter decrementing. A local, unprivileged user could use this flaw to trigger an Out of Memory OOM condition and, potentially, crash the system...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.5 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

Samba file sharing services remote command execution vulnerability(CVE-2 0 1 5-0 2 4 0)-vulnerability warning-the black bar safety net

! t01b9c96682271c023e.jpg Is storm the CVE-2 0 1 5-0 2 4 0 security vulnerabilities occur in the smbd daemon, he can be a malicious samba client to use, an attacker by sending a carefully constructed packet to the samba server, authentication is not required, it is possible to cause the remote...

Vulnerability early warning:. NET remote code execution vulnerability with EXP-a vulnerability warning-the black bar safety net

Just last week Microsoft announced. NET open source the good news, 其内容涉及.NET Framework Libraries,. NET Core Framework Libraries and RyuJit VM, allowing developers to write run on Mac OS X and Linux . NET program. Application developers are laughing, it's nothing...... The key is the security...

.NET Remoting Services Remote Command Execution Vulnerability

Exploit for windows platform in category remote exploits Source: https://github.com/tyranid/ExploitRemotingService Exploit Database Mirror: http://www.exploit-db.com/sploits/35280.zip ExploitRemotingService c 2014 James Forshaw ============================================= A tool to exploit .NET...

.NET Remoting Services - Remote Command Execution

.NET Remoting Services - Remote Command Execution Source: https://github.com/tyranid/ExploitRemotingService Exploit Database Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/35280.zip ExploitRemotingService c 2014 James Forshaw...

openSUSE Security Update : chromium (openSUSE-SU-2014:1378-1)

Update to Chromium 38.0.2125.101 This update includes 159 security fixes, including 113 relatively minor fixes. Highlighted securtiy fixes are: CVE-2014-3188: A combination of V8 and IPC bugs that can lead to remote code execution outside of the sandbox CVE-2014-3189: Out-of-bounds read in PDFium...

.NET Remoting Services - Remote Command Execution

Source: https://github.com/tyranid/ExploitRemotingService Exploit Database Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35280.zip ExploitRemotingService c 2014 James Forshaw ============================================= A tool to exploit .NET Remoting...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2014:1392 Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 6. This is the sixth regul...