8901 matches found
Introducing pywintrace: A Python Wrapper for ETW
ARCHIVED STORY Introducing pywintrace: A Python Wrapper for ETW By Anthony Berglund, Kevin Boyd · September 19, 2017 Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and...
How to Configure Syslog for XenMobile
How to enable Syslog/Sys logging for XenMobile. Note- Syslog is a standard logging protocol with two components: an auditing module which runs on the appliance and a server, which can run on a remote system. The Syslog protocol uses UDP or data transfer. Admin events and User events are recorded...
Introducing pywintrace: A Python Wrapper for ETW
ARCHIVED STORY Introducing pywintrace: A Python Wrapper for ETW By Anthony Berglund, Kevin Boyd · September 19, 2017 Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and...
UBUNTU-CVE-2017-0380
The rendserviceintroestablished function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to t...
DEBIAN-CVE-2017-0380
The rendserviceintroestablished function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to t...
EulerOS 2.0 SP1 : log4j (EulerOS-SA-2017-1213)
According to the version of the log4j package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An...
EulerOS 2.0 SP2 : log4j (EulerOS-SA-2017-1214)
According to the version of the log4j package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An...
RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 7 (Important) (RHSA-2017:2636)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2636 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...
RHEL 6 : jboss-ec2-eap (RHSA-2017:2638)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2638 advisory. The jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services AWS Elastic...
Shadow Brokers Leaks Another Windows Hacking Tool Stolen from NSA’s Arsenal
The Shadow Brokers, a notorious hacking group that leaked several hacking tools from the NSA, is once again making headlines for releasing another NSA exploit—but only to its "monthly dump service" subscribers. Dubbed UNITEDRAKE, the implant is a "fully extensible remote collection system" that...
log4j: Socket receiver deserialization vulnerability
It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...
log4j: Socket receiver deserialization vulnerability
It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the context of the...
CentOS 7 : log4j (CESA-2017:2423)
An update for log4j is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
log4j security update
CentOS Errata and Security Advisory CESA-2017:2423 An update for log4j is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Scientific Linux Security Update : log4j on SL7.x (noarch) (20170807)
Security Fixes : - It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log event that, during deserialization, would execute arbitrary code in the...
Citrix Receiver Updates Troubleshooting Guide
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the...
PiSavar - Detects PineAP Module and Starts Deauthentication Attack (for fake access points)
The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from being affected by initiating a deauthentication attack to the attacking device. How PineAP Module Works Collects SSID information Creates SSID poo...
August 16, 2017—KB4034661 (OS Build 14393.1613)
None None...
RHEL 7 : log4j (RHSA-2017:2423)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2423 advisory. Log4j is a tool to help the programmer output log statements to a variety of output targets. Security Fixes: It was found that when using...