Linux/x86 - SELinux Permissive Mode Switcher Shellcode (45 bytes)

Title: x86 SELinux change between permissive and enforcing modes shellcode Date: 20-02-2017 Author: Krzysztof Przybylski Platform: Linx86 Tested on: CentOS 6.8 i686 Shellcode Size: 45 bytes ID: SLAE - 871 / 1. Description: SELinux mode switcher. Permissive = "\x30"; Enforcing = "\x31" gcc...

Linux/x86 - SELinux Permissive Mode Switcher Shellcode (45 bytes)

Linux/x86 - SELinux Permissive Mode Switcher Shellcode 45 bytes. Shellcode exploit for Linx86 platform Title: x86 SELinux change between permissive and enforcing modes shellcode Date: 20-02-2017 Author: Krzysztof Przybylski Platform: Linx86 Tested on: CentOS 6.8 i686 Shellcode Size: 45 bytes ID:...

Authentication flaw

An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can iss...

CVE-2017-5554

An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can iss...

CVE-2017-5554

The CVE covers OnePlus 3/3T devices running OxygenOS before 4.0.2. A physical attacker can boot into fastboot without authentication by pressing Volume Up during boot and using adb reboot bootloader. Once in fastboot, the attacker can issue fastboot oem selinux permissive to set SELinux to Permis...

PT-2017-16574

Name of the Vulnerable Software and Affected Versions OnePlus 3 and 3T OxygenOS versions prior to 4.0.2 Description An issue was discovered in ABOOT that allows an attacker to reboot the device into fastboot mode without authentication. This can be achieved by either physically pressing the "Volu...

Legal Robot: CORS (Cross-Origin Resource Sharing)

Title: CORS Cross-Origin Resource Sharing Category: Others Affected URL: https://app.legalrobot.com/sockjs/info?cb=pcgb37npst Description: The application implements an HTML5 cross-origin resource sharing CORS policy for this request which allows access from any domain. Allowing access from all...

http-cross-domain-policy NSE Script

Checks the cross-domain policy file /crossdomain.xml and the client-acces-policy file /clientaccesspolicy.xml in web applications and lists the trusted domains. Overly permissive settings enable Cross Site Request Forgery attacks and may allow attackers to access sensitive data. This script is...

Medium: ruby22

Issue Overview: As discussed in an upstream announcement https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/, Ruby's OpenSSL extension suffers a vulnerability through overly permissive matching of hostnames, which can lead to similar bugs such as...

Fedora 21 setroubleshootd 3.2.22 - Local Privilege Escalation

Fedora 21 setroubleshootd 3.2.22 - Local Privilege Escalation setroubleshoot tries to find out which rpm a particular file belongs to when it finds SELinux access violation reports. The idea is probably to have convenient reports for the admin which type enforcement rules have to be relaxed...

[SECURITY] Fedora 20 Update: libhtp-0.5.6-2.fc20

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. The goals of the project, in the order of importance, are as follows: 1. Completeness of coverage; 2. Permissive parsing; 3. Awareness of evasion techniques; 4. Performance;...

[SECURITY] Fedora 21 Update: libhtp-0.5.16-1.fc21

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. The goals of the project, in the order of importance, are as follows: 1. Completeness of coverage; 2. Permissive parsing; 3. Awareness of evasion techniques; 4. Performance;...

Security feature bypass

The Network Location Awareness NLA service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not perform mutual authentication to determine a domain connection, which allows...

PT-2015-4389

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Description A security issue...

Exploit for Improper Input Validation in D.J.Bernstein Djbdns

What is MaraDNS MaraDNS is a free open-source computer progra...

CFME: CSRF protection vulnerability in referrer header

CFME: CSRF protection vulnerability via permissive check of the referrer header...

DEBIAN-CVE-2013-1813

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

Scientific Linux Security Update : setroubleshoot on SL5.x i386/x86_64

A flaw was found in the way sealert wrote diagnostic messages to a temporary file. A local unprivileged user could perform a symbolic link attack, and cause arbitrary files, writable by other users, to be overwritten when a victim runs sealert. CVE-2007-5495 A flaw was found in the way sealert...

Fedora Update for python-virtualenv FEDORA-2011-17289

Check for the Version of python-virtualenv OpenVAS Vulnerability Test Fedora Update for python-virtualenv FEDORA-2011-17289 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Ubuntu Update for acpid USN-1296-1

Ubuntu Update for Linux kernel vulnerabilities USN-1296-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12961.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for acpid USN-1296-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...