10058 matches found
log4j: Socket receiver deserialization vulnerability
It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...
CentOS 7 : log4j (CESA-2017:2423)
An update for log4j is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
log4j security update
CentOS Errata and Security Advisory CESA-2017:2423 An update for log4j is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Scientific Linux Security Update : log4j on SL7.x (noarch) (20170807)
Security Fixes : - It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the...
Citrix Receiver Updates Troubleshooting Guide
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the...
PiSavar - Detects PineAP Module and Starts Deauthentication Attack (for fake access points)
The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from being affected by initiating a deauthentication attack to the attacking device. How PineAP Module Works Collects SSID information Creates SSID poo...
August 16, 2017—KB4034661 (OS Build 14393.1613)
None None...
RHEL 7 : log4j (RHSA-2017:2423)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2423 advisory. Log4j is a tool to help the programmer output log statements to a variety of output targets. Security Fixes: It was found that when using...
Stack overflow
Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management ZCM allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2015-0786: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management ZCM allows remote attackers to execute arbitrary code via unspecified vectors...
Complaint Alleges Hotspot Shield VPN Engages in Deceptive Trade Practices
A complaint has been filed with the U.S. Federal Trade Commission alleging that a free VPN service marketed as a provider of secure and anonymous internet access shares user data and redirects traffic to partners, including online advertising companies. The Center for Democracy and Technology CDT...
RedHat Update for log4j RHSA-2017:2423-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Intrusion Detection Avoidance Payload Generator: NPS_Payload
This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn @Spoonman1091 Payload written by Ben Mauch @Ben0xA aka dirtyben. This tool provides a way to generate a PowerShell payloa...
log4j: Socket receiver deserialization vulnerability
It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...
Important: Red Hat Security Advisory: log4j security update
An update for log4j is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
CVE-2011-4650
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...
Code injection
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...
CVE-2011-4650
CVE-2011-4650 affects Cisco Data Center Network Manager. The issue is caused by Excessive Logging During a TCP Flood on Java Ports, where an oversized server.log leads to increased CPU utilization. Affected release: 5.2(1). Fixed releases: 6.0(0)SL1(0.14) and 5.2(2.73)S0. Practical impact is incr...
CVE-2011-4650
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...