MS15-076: Vulnerability in Windows Remote Procedure Call Could Allow Elevation of Privilege (3067505)

The remote Windows host is affected by a privilege escalation vulnerability in the Microsoft Remote Procedure Call RPC due to incorrectly allowing DCE/RPC connection reflection. A remote, authenticated attacker can exploit this vulnerability, with a specially crafted application, to elevate...

shopnc o2o版三处SQL注入打包

简要描述： 直接出数据 详细说明： 先来五个互联网实例 http://www.0795hui.com/circle/index.php?act=api&op=getthemelist&datacount=1%20procedure%20analyseextractvaluerand,concat0x3a,user,1 http://www.hfmy.cc/modules/circle/index.php?act=api&op=getthemelist&datacount=1%20procedure%20analyseextractvaluerand,concat0x3a,user,1...

The vulnerability of VMware Player allows a hacker to trigger a service failure in the guest or host operating system.

The vulnerability of VMware Player exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure for a 32-bit guest operating system or a 64-bit host operating system using a specially crafted RPC request...

CVE-2015-3205

libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" function calls in the "lexer's memory clean-up procedure."...

Libmimedir VCF Memory Corruption PoC

Libmimedir suffers from a memory corruption vulnerability. Adding two NULL bytes to the end of a VCF file allows a user to manipulate free calls which occur during it's lexer's memory clean-up procedure. This could lead to exploitable conditions such as crafting a specific memory chunk to allow f...

python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding

It was discovered that the Python xmlrpclib did not restrict the size of a gzip compressed HTTP responses. A malicious XMLRPC server could cause an XMLRPC client using xmlrpclib to consume an excessive amount of memory...

Samba prs_append_some_prs_data() memory corruption denial of service vulnerability

Samba is a program that implements the SMB protocol, cross-platform for file sharing and print sharing services. A security vulnerability in the prsappendsomeprsdata function in Samba 'parseprs.c' could be exploited to allow remote attackers to crash the application by sending specially crafted R...

EMC RSA Identity Management and Governance password reset

Weak password reset procedure...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the linux-headers-2.6-rpc package of the Debian GNU/Linux operating system can be exploited, which may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

CVE-2015-1889

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...

Design/Logic Flaw

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...

impacket

Impacket ======== !Latest Versionhttps://img.shields.io/pyp...

How to Perform a Manual Failback (Reverse Replication)

Article Applicability This article is relevant only to non-CDP snapshot-based replicas. Reverse replication cannot be used to fail back a CDP replica. To fail back a CDP replica, use the built-in failback workflow described in Failover and Failback for CDP. Purpose This article describes how to...

VMware Workstation 10.x < 10.0.5 Multiple Vulnerabilities (VMSA-2015-0001 / VMSA-2015-0004) (Windows)

The version of VMware Workstation installed on the remote Windows host is 10.x prior to 10.0.5. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows a local attacker to escalate privileges or cause a denial of service via an arbitrary write to a file...

CVE-2015-0429

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to RPC Utility...

CVE-2015-0430

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality via vectors related to RPC Utility...

Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00486)

Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris. It allows attackers to exploit this vulnerability to compromise the 'RPC Utility' subcomponent...

Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00491)

Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris. It allows attackers to exploit this vulnerability to compromise the 'RPC Utility' subcomponent...

chicken -- buffer overrun in substring-index[-ci]

chicken developer Moritz Heidkamp reports: The substring-index-ci procedures of the data-structures unit are vulnerable to a buffer overrun attack when passed an integer greater than zero as the optional START argument. As a work-around you can switch to SRFI 13's string-contains procedure which...

SQL Server stored procedure Hacking（II）of the user to impersonate-vulnerability warning-the black bar safety net

Security pulse in the before provides SQL Server stored procedure Hacking series the first portion of the SQL Server stored procedure Hacking I of trusted database, now to translate the SQL Server stored procedure Hacking（II）of the user to impersonate on Application developers often use SQL Serve...