CVE-2016-6136

When creating audit records for parameters to executed children processes, an attacker can convince the Linux kernel audit subsystem can create corrupt records which may allow an attacker to misrepresent or evade logging of executing commands...

CVE-2016-6449

A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. Stopping certain critical processes could cause a denial...

CVE-2016-6449

A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. Stopping certain critical processes could cause a denial...

CVE-2016-6449: Undefined Security Weakness

A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. Stopping certain critical processes could cause a denial...

Red Hat JBoss BRMS and BPM Suite Incompletely Fix HTML Injection Vulnerability

Red Hat JBoss BRMS and BPM Suite are both products of Red Hat Red Hat. The former is a set of enterprise-class business rules management system platform, the latter is a set of JBoss BRMS all the functions of the collection of business process management platform. An HTML injection vulnerability...

UBUNTU-CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility ...

UBUNTU-CVE-2016-6703

A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unprivileged process. This...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have...

Linux Privilege Escalation Signal

The vulnerability of the Linux operating system’s system call clone kernel function is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating locally, to send signals to privileged parent processes from unprivileged child processes by creating a new...

LocalTapiola: Lahitapiola´s customer names send to 3rd party

Issue The reporter found that a logged on customers real name but no further personal information could leak to a 3rd party site in certain transaction processes. Fix The issue was investigated and found to be valid. Reasoning The reported case was valid and although not a vulnerability as such, ...

Windows Remote Incident Response: CimSweep

Windows Remote Incident Response CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows. CimSweep may also be used to engage in offensive reconnaissance without the need to drop any payload to...

Free Tool Protects Mac Users from Webcam Surveillance

DENVER—Hijacking a user’s webcam is one of the more dastardly tactics used for surveillance. In most cases the attacker can use a number of different webcam-aware malware samples to quietly turn on and record audio and video from the target’s machine. Doing so, however, also turns on the embedded...

Cross site scripting

Cross-site scripting XSS vulnerability in Business Process Editor in Red Hat JBoss BPM Suite before 6.3.3 allows remote authenticated users to inject arbitrary web script or HTML by levering permission to create business processes...

PT-2016-6408

Name of the Vulnerable Software and Affected Versions Red Hat JBoss BPM Suite versions prior to 6.3.3 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with permission to create business processes to inject arbitrary web script or HTML. Recommendations For...

XenServer Host become responsive In Reboot/Shutdown

XenServer hangs on reboot with following message in serial logs Sending all processes the TERM signal... Sending all processes the KILL signal... Saving random seed: Syncing hardware clock to system time Turning off swap: Unmounting pipe file systems: Unmounting file systems: Please stand by whil...

PT-2016-5434

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Description The issue is related to the kernel API in Microsoft Windows not properly enforcing permissions. This allows local users to potentially spoof processes, spoof inter-proce...

Android Privilege Escalation

The vulnerability of the initial Android operating system loader from LG Electronics is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges by gaining access to privileged processes...

FreeBSD : FreeBSD -- Incorrect argument validation in sysarch(2) (7b6a11b5-600a-11e6-a6c3-14dae9d210b8)

A special combination of sysarch2 arguments, specify a request to uninstall a set of descriptors from the LDT. The start descriptor is cleared and the number of descriptors are provided. Due to lack of sufficient bounds checking during argument validity verification, unbound zero'ing of the proce...

Windows Process Filtering System: ProcFilter

Windows Process Filtering System ProcFilter is a process filtering system for Windows with built-in YARA integration. YARA rules can be instrumented with custom meta tags that tailor its response to rule matches. It runs as a Windows service and is integrated with Microsoft’s ETW API , making...

Mimikittenz - Post-Exploitation Powershell Tool for Extracting Juicy info from Memory

mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes using regex patterns including but no...