PT-2019-17650

Name of the Vulnerable Software and Affected Versions kill-port versions prior to 1.3.2 Description The issue allows an attacker to inject arbitrary OS commands due to the usage of the exec function in a third-party module. This is possible because the package does not validate user input on the...

CVE-2018-19640

If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 e.g. with CVE-2018-19638 he can kill arbitrary processes on the local machine...

CVE-2018-19640: Insecure Temporary File

If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 e.g. with CVE-2018-19638 he can kill arbitrary processes on the local machine...

Remote Code Execution (RCE)

kill-port is vulnerable to remote code execution. An attacker is able to inject and execute arbitrary OS commands due to the usage of exec in a third-party module...

CVE-2019-1003022

A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master...

Microsoft Edge Chakra - InlineArrayPush Type Confusion Exploit

/ In Chakra, if you add a numeric property to an object having inlined properties, it will start transition to a new type where the space for some of previously inlined properties become for the pointer to the property slots and the pointer to the object array which stores numeric properties. For...

CVE-2018-16888

It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user e.g. User field set in the service file, a local attacker who is able to write to the PIDFile of the mentioned service may use this fl...

UBUNTU-CVE-2018-16888

It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user e.g. User field set in the service file, a local attacker who is able to write to the PIDFile of the mentioned service may use this fl...

DEBIAN-CVE-2018-16888

It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user e.g. User field set in the service file, a local attacker who is able to write to the PIDFile of the mentioned service may use this fl...

Click Here to Kill Everybody Available as an Audiobook

Click Here to Kill Everybody is finally available on Audible.com. I have ten download codes. Not having anything better to do with them, here they are: 1. HADQSSFC98WCQ 2. LDLMC6AJLBDJY 3. YWSY8CXYMQNJ6 4. JWM7SGNUXX7DB 5. UPKAJ6MHB2LEF 6. M85YN36UR926H 7. 9ULE4NFAH2SLF 8. GU7A79GSDCXAT 9...

Linux/x86 - Kill All Processes Shellcode (14 bytes)

Exploit Title: Linux/x86 - Kill All Processes Shellcode 14 bytes Exploit Author: strider Vendor Homepage: None Software Link: None Tested on: Debian 9 Stretch i386/ Kali Linux i386 CVE : None Shellcode Length: 14 Description: Linux/x86 kill 9 -1 14 bytes...

BLITZ! Like a Great Middle Linebacker, An Agile & Strong EDR Solution Can Quickly Respond to an Offensive Attack

As we near the close of 2018, we should appreciate that cyberspace has become an increasingly hostile landscape. Geoplitical tensions are manifesting in cyberspace and cyber criminals have become increasingly punitive this year. We at Carbon Black have observed some interesting trends: Vapor Worm...

PT-2018-3445

Name of the Vulnerable Software and Affected Versions: Supportutils versions prior to 3.1-5.7.1 Description: The issue is related to insufficient input validation in the Supportutils package for SUSE Linux. An attacker who can create files in the directory used for collecting log files can...

CVE-2017-18317

CVE-2017-18317 affects Qualcomm closed‑source components in Snapdragon Automotive and Snapdragon Mobile (MSM8996AU, SD 410/12, SD 820, SD 820A). The issue allows bypass of modem restrictions (sim lock/sim kill) by manipulating the system to issue a deactivation flow sequence. The available docume...

PT-2018-6835

Name of the Vulnerable Software and Affected Versions: Snapdragon Automobile versions MSM8996AU, SD 410/12, SD 820, SD 820A Snapdragon Mobile versions MSM8996AU, SD 410/12, SD 820, SD 820A Description: The issue allows restrictions related to the modem, such as sim lock and sim kill, to be...

mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS

Adobe released a patch for a critical flaw on Tuesday that leaves its Flash Player vulnerable to arbitrary code execution by an adversary. Affected are versions of the Flash Player running on Windows, macOS, Linux and Chrome OS. In tandem, a Microsoft Security Advisory was also issued for the bug...

CISO series: Lessons learned—4 priorities to achieve the largest security improvements

In my past life as CISO, Ive worked for small companies, state governments, and large enterprises, and one thing that has been true at all of them is that there is an infinite number of security initiatives in each organization you could implement, yet the resources to accomplish those tasks are...

SANS THIR Summit Wrap Up – “We Have 15 Minutes”

Heading back to San Diego before I get on another flight 30 hours later. Lots of people say "what are you crazy? Why do that?"…to which I say: "we cannot achieve any mission without sacrifice." Going to events like the SANS Threat Hunting IR summit remind just how many dedicated people we have on...

Cb Response Named Leader in EDR Space by Forrester

Last quarter, Forrester created a report assessing the state of the EDR market and how vendors stack up against one another. A variety of companies were evaluated in three key areas: The strengths and weaknesses of their current offerings. Forrester cited key criteria to include: alerting...