American Fuzzy Lop Utilities: afl-utils

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization afl-utils is a collection of utilities to assist fuzzing with american-fuzzy-lop afl . afl-utils includes tools for: automated crash sample collection, verification, reduction and analys...

Qemu Information Disclosure Vulnerability (CNVD-2016-02391)

QEMU is a suite of analog processor software. A vulnerability in Qemu's kvmvapic.c when using Task Priority Register TPR optimization allows a local attacker to exploit the vulnerability to obtain host-sensitive information...

engagementoptimization.com XSS vulnerability

Vulnerable URL: https://www.engagementoptimization.com/external-link.jspa?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8982636 Google Pagerank|...

[SECURITY] Fedora 24 Update: xstream-1.4.9-1.fc24

XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for...

[FAQ]: Is ICA or CGP recommended on high latency links when traffic is being optimized?

Question: Is ICA or CGP recommended on high latency links when traffic is being optimized? Answer: CGP is recommended on high latency links because CGP has a fixed buffer size on the server and on long latency links, despite CB TCP optimizations, the server won’t send data faster its waiting for ...

Fedora 21 : dovecot-2.2.19-1.fc21 (2015-780302029a)

dovecot updated to 2.2.19 mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expunge the duplicates. Various search fixes fts, solr, tika, lib-charset, indexer Various virtual plugin fixes Various fixes...

MyBB < 1.6.10 Multiple Vulnerabilities

Binary data 9119.prm...

Adobe Flash - SimpleButton Creation Type Confusion

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=640 There is a type confusion vulnerability in the SimpleButton constructor. Flash stores an empty button to use to create buttons for optimization reasons. If this obje...

Adobe Flash - SimpleButton Creation Type Confusion

Adobe Flash - SimpleButton Creation Type Confusion Source: https://code.google.com/p/google-security-research/issues/detail?id=640 There is a type confusion vulnerability in the SimpleButton constructor. Flash stores an empty button to use to create buttons for optimization reasons. If this objec...

Adobe Flash - SimpleButton Creation Type Confusion

Source: https://code.google.com/p/google-security-research/issues/detail?id=640 There is a type confusion vulnerability in the SimpleButton constructor. Flash stores an empty button to use to create buttons for optimization reasons. If this object is created using a SWF tag before it is created i...

MGASA-2016-0072 Updated libgcrypt packages fix security vulnerabilities

Updated libgcrypt packages fix security vulnerability: Daniel Genkin, Lev Pachmanov, Itamar Pipman and Eran Tromer discovered that the ECDH secret decryption keys in applications using the libgcrypt20 library could be leaked via a side-channel attack CVE-2015-7511. The libgcrypt package was also...

CIFS/SMB optimization displays “Secure Dialect Negotiation not support for unsigned connections

QUESTION: CIFS/SMB optimization displays “Secure Dialect Negotiation not support for unsigned connections ANSWER: This is known limitation. We do not support unsigned SMB2 connection with windows 10 as it uses secure dialect negotiation. However performance should be better compare to w/o CB as w...

Code injection

cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service WAAS and Virtual WAAS vWAAS devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers to cause a denial of service resource consumption and device reload via crafted network traffic, aka Bug...

CVE-2015-6421

Cisco WAAS/vWAAS CIFS optimization (cifs-ao) is affected. A DoS is possible from crafted CIFS traffic due to insufficient flow handling, causing resource exhaustion and device reload. Affected versions are 5.x prior to 5.3.5d (and 5.4) and 5.5 prior to 5.5.3. Exploitation is described as remote a...

Cisco Wide Area Application Service CIFS Denial of Service Vulnerability

A vulnerability in the Common Internet File System CIFS optimization feature of the Cisco Wide Area Application Service WAAS device could allow an unauthenticated, remote attacker to perform a resource consumption attack which, could result in a complete denial of service DoS condition. The...

Network Security Policy Compiler: Netspoc

Netspoc is free software to manage all the packet filter devices inside your network topology. Filter rules for each device are generated from one central ruleset, using a description of your network topology. Netspoc generates ACLs and static routes for a given network policy, consisting of a se...

F5 Networks BIG-IP : QEMU vulnerability (SOL51841514)

hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WINREADNATIVEMAX command to an empty drive, which triggers a...

[SECURITY] Fedora 22 Update: COPASI-4.16-0.19.20150817git3bc4e9.fc22

COPASI is a software application for simulation and analysis of biochemical networks and their dynamics. COPASI is a stand-alone program that supports models in the SBML standard and can simulate their behavior using ODEs or Gillespie's stochastic simulation algorithm; arbitrary discrete events c...

[SECURITY] Fedora 23 Update: COPASI-4.16-0.19.20150817git3bc4e9.fc23

COPASI is a software application for simulation and analysis of biochemical networks and their dynamics. COPASI is a stand-alone program that supports models in the SBML standard and can simulate their behavior using ODEs or Gillespie's stochastic simulation algorithm; arbitrary discrete events c...

Unable to exclude files from snapshot: Shadow Copy Optimization Writer timed out

Challenge A Veeam Agent for Microsoft Windows backup job configured to operate in file-level backup mode with an entire volume selected and individual folders excluded, may fail with the error shown below. Unable to exclude files from snapshot: Shadow Copy Optimization Writer timed out. Cause The...