CVE-2015-6556

EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption SEE before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump...

CVE-2015-6556

Symantec Endpoint Encryption (SEE) up to version 11.0 is affected by CVE-2015-6556 due to EACommunicatorSrv.exe in the Framework Service allowing an authenticated remote user to trigger a memory dump and access credentials stored on the client. The issue is documented with a low CVSS v2 base scor...

Symantec Endpoint Encryption Client Memory Dump Information Disclosure

SUMMARY Symantecs Endpoint Encryption SEE Client is susceptible to information disclosure if a user with access to a system hosting a client is able to force a client memory dump and access the content of the memory dump. This could result in unauthorized exposure of such things as stored...

Mail.ru: [w1.dwar.ru] Core Dump

Если помните багу с HeartBleed, то там можно было читать оперативную память сервера в поисках Credential информации. Здесь же похожая уязвимость, когда сервер crash-ится, на жестком диске остаётся дамп памяти вместе со всеми данными, которые можно анализировать для выяснения причины падения...

Volatile Memory Extraction: The Volatility Framework

The Volatility Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated...

SMF (Simple Machine Forum) 2.0.10 - Remote Memory Exfiltration

!/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Simple Machine Forum Filippo Roncari Truel Lab http://lab.truel.it Requirements: SMF = 2.0.10 PHP = 5.6.11 / 5.5.27 / 5.4.43 Advisories: TL-2015-PHP04 http://lab.truel.it/d/advisories/TL-2015-PHP04.txt TL-2015-PHP06...

SMF 2.0.10 Remote Memory Exfiltration Exploit

Exploit for php platform in category web applications !/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Filippo Roncari Truel Lab http://lab.truel.it import sys, requests, time, os, socket, thread, base64, string, urllib from multiprocessing import Process Payload config bytesnum = 000 num of...

CentOS 7 : libvirt (CESA-2015:0323)

Updated libvirt packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Loftek Nexus 543 IP Cameras - Multiple Vulnerabilities

No description provided by source. CSRF: HTMLTITLELoftek Nexus 543 CSRF PoC/TITLE IMG...

PHP <= 5.2.1 substr_compare() Information Leak Exploit

No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...

FOSCAM IP-Cameras Improper Access Restrictions

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ MayGion IP Cameras multiple vulnerabilities 1. Advisory Information Title: MayGion IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0322 Advisory URL:...

QNX RTOS 4.25 dumper Arbitrary File Modification Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4904/info When creating memory dump files, the QNX RTOS debugging utility 'dumper' follows symbolic links. It also sets ownership of the file to the userid of the terminated process. It is possible for malicious local...

Siemens Simatic S7-300 PLC Remote Memory Viewer

No description provided by source. Exploit Title: Siemens Simatic S7 300 Remote Memory Viewer Backdoor Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3 Msf::Auxiliary...

AOL Instant Messenger 4.x Hyperlink Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4244/info AOL Instant Messenger AIM is a real time messaging service. The AIM client runs on Microsoft Windows operating systems. It is possible to crash the AIM client by sending a specially formatted hyper-link to a use...

PHP 4.x DLOpen Memory Disclosure Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit...

SunOS <= 4.1.4 arp(8c) Memory Dump Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/291/info The version of arp8c which shipped with versions of SunOs 4.1.X could be used to dump system memory by using the -f flag. This flag causes the file filename to be read and multiple entries to be set in the ARP...

Cuckoo Sandbox v1.1 - Automated Malware Analysis

Cuckoo Sandbox is a malware analysis system. It simply means that you can throw any suspicious file at it and in a matter of seconds Cuckoo will provide you back some detailed results outlining what such file did when executed inside an isolated environment. Cuckoo generates a handful of differen...

Security Advisory-OpenSSL Heartbeat Extension vulnerability (Heartbleed bug) on Huawei multiple products

Some OpenSSL software versions used in multiple Huawei products have the following OpenSSL vulnerability. Unauthorized remote attackers can dump 64 Kbytes of memory of the connected server or client in each attack. The leaked memory may contain sensitive information, such as passwords and private...

PAM S/Key: Information disclosure

Background PAM S/Key is a pluggable authentication module for the OpenBSD Single-key Password system. Description Ulrich Müller reported that a Gentoo patch to PAM S/Key does not remove credentials provided by the user from memory. Impact A local attacker with privileged access could inspect a...

[MoonSols] Windows Memory Toolkit

MoonSols Windows Memory Toolkit is a powerful toolkit containing all the utilities needed to perform any kind of memory acquisition or conversion during an incident response, or a forensic analysis for Windows desktops, servers or virtualized environment. The version 2.0 is a refresh and updated...