Keen Lab Takes Down iPhone 6S, Nexus 6P, at Mobile Pwn2Own

Hackers identified a series of vulnerabilities in Android and iOS to take down a Google Nexus 6P and an Apple iPhone 6S this week at Mobile Pwn2Own. The mobile version of the popular hacking challenge, put on by Trend Micro and Tipping Point’s Zero Day Initiative, was held in tandem with the...

Clean Master 1.0 - Unquoted Service Path Privilege Escalation Vulnerability

Clean Master Cleaner is a powerful application dedicated to the cleaning of certain content Android terminal. It is able to remove all traces of activities performed on the Smartphone to free up space and increase performance. This app is able to best improve the security system of the device. Co...

ir-rescue - A Windows Batch Script To Comprehensively Collect Host Forensic Data

ir-rescue is a lightweight Windows Batch script that collects a myriad of forensic data from 32-bit and 64-bit Windows systems while respecting the order of volatility and artifacts that are changed with the execution of the script e.g. , prefetch files. It is intended for incident response use a...

Microsoft SQL Server 2012 11.0.x.x < 11.0.3460.0 Multiple Vulnerabilities (2977325)

Binary data 9704.prm...

XSS Vulnerability in NetEase Email Master Client PC Version

NetEase Mail Master client is a universal email client launched by NetEase 163. An XSS vulnerability exists in the PC version Ver2.4.1.8 of the NetEase Mail Master client. It allows attackers to insert malicious js code into the page to obtain user cookies and other information, leading to user...

XSS Vulnerability in NetEase Mail Master Client Android Version

NetEase Mail Master client is a universal email client launched by NetEase 163. An XSS vulnerability exists in the Android version Ver4.14.1 of the NetEase Mail Master client. It allows attackers to insert malicious js code into the page to obtain user cookies and other information, leading to us...

XSS Vulnerability in NetEase Mail Master Client IOS Version

NetEase Mail Master client is a universal email client launched by NetEase 163. An XSS vulnerability exists in the IOS version Ver4.14.1 of the NetEase Mail Master client. It allows attackers to insert malicious js code into the page to obtain user cookies and other information, leading to user...

XSS Vulnerability in NetEase Mail Client for Android

NetEase Mail Master client is a universal email client launched by NetEase 163. A cross-site scripting vulnerability exists in NetEase Mail Master Android Ver 4.13.3. It allows attackers to insert malicious js code into the page to obtain user cookies and other information, leading to user...

Important: Red Hat Security Advisory: mariadb-galera security and bug fix update

An update for mariadb-galera is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Clean Master v1.0 - Unquoted Path Privilege Escalation

Document Title: =============== Clean Master v1.0 - Unquoted Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1968 Release Date: ============= 2016-10-05 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Clean Master 1.0 Privilege Escalation

Document Title: =============== Clean Master v1.0 - Unquoted Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1968 Release Date: ============= 2016-10-05 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Clean Master v1.0 - Unquoted Path Privilege Escalation

Document Title: =============== Clean Master v1.0 - Unquoted Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1968 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Error: “Preparation of the Master VM Image failed” When UPDATING a Catalog

NOTE : This article contains information about UPDATING a CatalogONLY. For information on CREATING a Catalog see: CTX140734 Updating a catalog might fail during Image Preparation because of many reasons. In order to identify what caused the failure we need to collect preparation Image logs...

swarm - A Modular Distributed Penetration Testing Tool

Swarm is an open source modular distributed penetration testing Tool that use distributed task queue to implement communication in the master-slave mode system and use MongoDB for data storage. It consists of a distributed framework and function modules. The function module can be an entirely new...

[SECURITY] Fedora 25 Update: keepass-2.34-1.fc25

KeePass is a free open source password manager, which helps you to remember your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. You only have to remember one single master password or select the key file to unlock the...

New Relic: Java RMI (Remote Code Execution)

hello Guys while i was testing your site i found an interesting domain of newrelic which is pinger-master.newrelic.com and when i visit that domain it says unable to connect with the host the i quickly do nslookup and i got this results fish@punt $ nslookup pinger-master.newrelic.com Server:...

How to change the XenServer Pool master role from XenServer Console

In certain situation like Master server becoming unresponsive, we may need to changethe XenServer Pool master role. This article illustrates how to perform that from XenServer Console...

discogs.com XSS vulnerability

Vulnerable URL: https://www.discogs.com/seller/anonymous/profile?masterid=1030658=34534 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1147 VIP website status:| Yes Check discogs.c...

Design/Logic Flaw

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...

CVE-2016-0635

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...