197 matches found
Linux kernel IP stack denial of service vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the IP stack in Linux kernel 4.5.7 and earlier versions. A remote attacker could exploit this vulnerability to cause a denial of service...
MS15-0 3 4 IIS 7.0 HTTP.sys a remote code execution vulnerability(CVE-2 0 1 5-1 6 3 5) POC-vulnerability warning-the black bar safety net
Detection script: Python----beebeeto http://www.beebeeto.com/pdb/poc-2015-0081/ !/ usr/bin/env python coding=utf-8 """ Site: http://www.beebeeto.com/ Framework: https://github.com/n0tr00t/Beebeeto-framework """ import socket import random import urlparse from baseframe import BaseFrame class...
Microsoft Windows 'HTTP.sys' Denial of Service Vulnerability (3148795)
This host is missing an important security update according to Microsoft Bulletin MS16-049. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
HTTP.sys Denial of Service Vulnerability
A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP 2.0 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become...
http-vuln-cve2015-1635 NSE Script
Checks for a remote code execution vulnerability MS15-034 in Microsoft Windows systems CVE2015-2015-1635. The script sends a specially crafted HTTP request with no impact on the system to detect this vulnerability. The affected versions are Windows 7, Windows Server 2008 R2, Windows 8, Windows...
IIS remote code execution vulnerability, CVE-2 0 1 5-1 6 3 5-the vulnerability warning-the black bar safety net
In Microsoft 4 on 1 4, patch released the patch, there is one for the IIS server remote code execution vulnerability hazard is very large, please the majority of users attention. Vulnerability information A remote code execution vulnerability exists in the HTTP Protocol stack HTTP.sys, when the...
IIS the latest high-risk Vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. THE POC and online detection of source-vulnerability warning-the black bar safety net
! HTTP. sys remote code execution vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. the A remote code execution vulnerability exists in the HTTP Protocol stack HTTP.sys, when the HTTP.sys not correct parsing specially crafted HTTP request to cause this vulnerability. Successful exploitation of...
MS15-034 HTTP Protocol Stack Request Handling Denial-of-Service
This module will check if scanned hosts are vulnerable to CVE-2015-1635 MS15-034, a vulnerability in the HTTP protocol stack HTTP.sys that could result in arbitrary code execution. This module will try to cause a denial-of-service. This module requires Metasploit: https://metasploit.com/download...
Microsoft HTTP.sys RCE Vulnerability (MS15-034) - Active Check
This host is missing an important security update according to Microsoft Bulletin MS15-034. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
MS15-034: Vulnerability in HTTP.sys Could Allow Remote Code Execution (3042553)
The version of Windows running on the remote host is affected a vulnerability in the HTTP protocol stack HTTP.sys due to improperly parsing crafted HTTP requests. A remote attacker can exploit this to execute arbitrary code with System privileges. C Tenable Network Security, Inc...
PT-2015-1051
Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold Microsoft Windows Server 2012 R2 Description A remote code execution issue exists in the HTTP protocol...
Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00466)
Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris that allows attackers to exploit the 'TCP/IP' protocol to compromise the 'Network' subcomponent...
Affix Bluetooth Protocol Stack 3.1/3.2 Signed Buffer Index Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/13347/info A local signed buffer index vulnerability affects Affix Bluetooth Protocol Stack. This issue is due to a failure of the affected utility to properly handle user-supplied buffer size parameters. This issue may b...
openSUSE Security Update : kernel (openSUSE-SU-2011:0004-1)
The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2010-4347: A local user could inject ACPI code into the kernel via the world-writable 'customdebug' file, allowing local privilege escalation. CVE-2010-4258: A local attack...
USN-2223-1: Linux kernel (Quantal HWE) vulnerabilities
Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. An unprivileged local user could exploit this flaw to obtain potentially sensitive information from kernel memory. CVE-2014-1738 Matthew Daley reported a flaw in the handling of ioctl commands by the floppy...
Microsoft Windows 'HTTP.sys' Denial of Service Vulnerability (2829254)
This host is missing an important security update according to Microsoft Bulletin MS13-039. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows 'HTTP.sys' Denial of Service Vulnerability (2829254)
This host is missing an important security update according to Microsoft Bulletin MS13-039. OpenVAS Vulnerability Test $Id: secpodms13-039.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows 'HTTP.sys' Denial of Service Vulnerability 2829254 Authors: Arun Kallavi Copyright: Copyright c 2013...
CVE-2012-6544
The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...
UBUNTU-CVE-2012-6544
The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...
Windows Bluetooth栈bthport.sys驱动程序远程代码执行漏洞(MS11-053)
BUGTRAQ ID: 48617 CVE ID: CVE-2011-1265 Microsoft Windows Bluetooth stack是蓝牙协议栈的实现。 Microsoft Windows Bluetooth stack在实现上存在远程代码执行漏洞,远程攻击者可通过发送特制的蓝牙报文到受影响系统利用此漏洞导致远程代码执行。此漏洞仅影响带有蓝牙功能的系统。 漏洞源于访问未能正确初始化或处理已经被删除内存对象的方式存在的问题。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows 7...