5014 matches found
groovy: remote execution of untrusted code in class MethodClosure
A flaw was discovered in the way applications using Groovy used the standard Java serialization mechanism. A remote attacker could use a specially crafted serialized object that would execute code directly when deserialized. All applications which rely on serialization and do not isolate the code...
Malware Analysis System: Cuckoo Sandbox
Cuckoo Sandbox is an advanced, extremely modular, and 100% open source automated malware analysis system with infinite application opportunities. By default it is able to: Analyze many different malicious files executables, office documents, pdf files, emails, etc as well as malicious websites...
virt: guest to host DoS by triggering an infinite loop in microcode via #DB exception
It was found that the x86 ISA Instruction Set Architecture is prone to a denial of service attack inside a virtualized environment in the form of an infinite loop in the microcode due to the way sequential delivering of benign exceptions such as DB debug exception is handled. A privileged user...
Zerodium Offers $100K for Adobe Flash Heap Isolation Bypasses
Despite calls to eliminate Adobe Flash Player, researchers inside and outside the vendor continue to invest in and build mitigations against modern attacks. As recently as three weeks ago, Adobe announced it had rewritten its memory manager, laying the groundwork for widespread heap isolation,...
groovy: remote execution of untrusted code in class MethodClosure
A flaw was discovered in the way applications using Groovy used the standard Java serialization mechanism. A remote attacker could use a specially crafted serialized object that would execute code directly when deserialized. All applications which rely on serialization and do not isolate the code...
Network Vision IntraVue Code Injection Vulnerability
OVERVIEW Researcher Jürgen Bilberger from Daimler TSS GmbH has identified a code injection vulnerability in Network Vision’s IntraVue software. Network Vision has produced a new version that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The...
Exploit Writing and Exploit Mitigation
More and more white hats who practice offensive security and exploit writing are simultaneously talking about exploit mitigation. Granted, some are incentivized to do so by their employers or six-figure rewards programs, but the trend nonetheless is moving away from finding and fixing individual...
[SECURITY] Fedora 21 Update: lxc-1.0.7-4.fc21
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...
[SECURITY] Fedora 22 Update: lxc-1.1.4-2.fc22
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...
[SECURITY] Fedora 23 Update: lxc-1.1.4-2.fc23
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...
CVE-2008-5393
UPR-Kernel in Ubuntu Privacy Remix UPR before 8.04r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by 1 reading from or 2 writing to these arrays...
This Secure Operating System Can Protect You Even if You Get Hacked
Hackers, Government Agencies and sophisticated malware, are collecting every piece of Digital data that we transmit through our Computers, Smartphones or Internet-enabled Gadgets. No matter how secure you think you might be, something malicious can always happen. Because, "With the right tools an...
Linux Memory Scanner: scanmem
Linux Memory Scanner scanmem is a debugging utility designed to isolate the address of an arbitrary variable in an executing process. scanmem simply needs to be told the pid of the process, and the value of the variable at several different times. After several scans of the process, scanmem...
Design/Logic Flaw
Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic...
CVE-2015-6675
The CVE-2015-6675 entry concerns Siemens RUGGEDCOM ROS where IP forwarding is permanently enabled in ROS 3.8.0 through 4.1.x, potentially allowing a remote attacker in one VLAN to bypass VLAN isolation and communicate with devices in another VLAN if IPs are configured across VLANs. Exploitation i...
CVE-2015-6675
Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic...
Whonix v11 - Anonymous Operating System
Whonix is an operating system focused on anonymity, privacy and security. It’s based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user’s real IP. Whonix consists of two parts: One...
[SECURITY] Fedora 21 Update: lxc-1.0.7-2.fc21
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...