7833 matches found
Operation Windigo: Linux malware campaign that infected 500,000 Computers Worldwide
In late 2013, Security Researchers identified thousands of Linux systems around the world infected with the OpenSSH backdoor trojan and credential stealer named Linux/Ebury, that allows unauthorized access of an affected computer to the remote attackers. Antivirus Firm ESET's Reseacher team has...
PostgreSQL Database SET ROLE Security Bypass (CVE-2014-0060)
A policy bypass vulnerability has been found in PostgreSQL database server. The vulnerability is due to a design weakness when granting a role without ADMIN OPTION. A remote attacker can exploit the vulnerability to cause a policy bypass allowing execution of a security-restricted operation or a...
Information disclosure
Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...
UBUNTU-CVE-2013-6442
The ownerset function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended...
CVE-2013-5133
Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...
HostBill Email Templates Configuration Page跨站请求伪造漏洞
Bugtraq ID:66009 HostBill是国外Quality Software开发的虚拟主机、VPS云主机、独立主机、域名及附加产品的管理系统。 HostBill Email模版配置页面存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 HostBill 厂商补丁： Zimbra ----- HostBill 2014-03-03已经修复该漏洞，建议用户下载更新： http://hostbillapp.com/changelog...
Ubuntu 12.10 : linux vulnerabilities (USN-2138-1)
Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker could exploit this error to discover the original MAC address after a spoofing atack. CVE-2013-4579 Andrew Honig reported a flaw in the Linux Kernel's kvmvmioctlcreatevcpu function ...
HP Data Protector Backup Client Service Remote Code Execution Exploit
Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in...
USN-2141-1: Linux kernel (OMAP4) vulnerabilities
Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker could exploit this error to discover the original MAC address after a spoofing atack. CVE-2013-4579 Andrew Honig reported a flaw in the Linux Kernel's kvmvmioctlcreatevcpu function ...
Microsoft to Patch IE 10 Zero Day March 2014 Patch Tuesday
Microsoft will patch a lingering zero-day vulnerability in Internet Explorer next Tuesday, one of five bulletins it will release as part of its March 2014 Patch Tuesday security updates. The IE 10 zero-day was disclosed close to a month ago when researchers at FireEye reported on Operation SnowMa...
WordPress Post to PDF 'options.php'跨站脚本漏洞
Bugtraq ID:65823 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Post to PDF插件'options.php'不正确过滤用户提交的参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress Post to PDF 2.3.1 目前没有详细解决方案提供： http://wordpress.org/plugins/...
HP Data Protector Backup Client Service Remote Code Execution
This Metasploit module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in the EXECBAR operation, which allows to execute arbitrary processes. This Metasploit module has been tested successfully on HP Data Protector 6.20 on Windows 2003 SP2...
HP Data Protector Backup Client Service Remote Code Execution
This module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in the EXECBAR operation, which allows to execute arbitrary processes. This module has been tested successfully on HP Data Protector 6.20 on Windows 2003 SP2 and Windows 2008 R2...
CVE-2014-2038
The nfscanextendwrite function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operation without a certain up-to-date verification, which allows local users to obtain sensitive information from kernel memory in opportunistic circumstances by...
Complete Microsoft EMET Bypass Developed
SAN FRANCISCO — Researchers at Bromium Labs are expected to announce today they have developed an exploit that bypasses all of the mitigations in Microsoft’s Enhanced Mitigation Experience Toolkit EMET. Principal security researcher Jared DeMott is scheduled to deliver a presentation this morning...
ThinkSAAS SQL注入漏洞打包1-5
简要描述： 漏洞很多，一个一个提交太麻烦了，一起提交吧，希望能走个大厂商 详细说明： 第一处SQL注入 /app/group/action/do.php //编辑小组基本信息 case "editbase": $groupname = t$POST'groupname'; $groupdesc = tsClean$POST'groupdesc'; if$groupname=='' || $groupdesc=='' tsNotice"小组名称和介绍都不能为空！"; //过滤内容开始 aac'system'-antiWord$groupname;...
CVE-2014-0322: Internet Explorer zero-day exploit targets US Military Intelligence
Hackers are using a zero day vulnerability in Microsoft's Internet Explorer IE web browser and targeting US military personnels in an active attack campaign, dubbed as 'Operation Snowman'. FireEye Researchers have discovered that a U.S. veterans website was compromised to serve a zero day exploit...
New IE Zero Day Found Targeting Military Intelligence
Attackers were able to compromise the U.S. Veterans of Foreign Wars’ website this week and serve up a previously unknown zero day exploit in Internet Explorer 10, and while motivation behind the campaign is still unclear, experts are speculating its aim was to procure military intelligence...
Underground Marketplace 'Utopia' Seized by Dutch Police, 5 suspects arrested
After Silk Road, another underground online marketplace 'Utopia' has been seized by Dutch National Police, where users could buy illegal drugs and guns for home delivery. The police started their investigation under Codename 'Operation Commodore' in 2013, and finally seized Utopia's Germany-based...