Lucene search
K

197 matches found

CNVD
CNVD
added 2016/10/18 12:0 a.m.2 views

Linux kernel IP stack denial of service vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the IP stack in Linux kernel 4.5.7 and earlier versions. A remote attacker could exploit this vulnerability to cause a denial of service...

7.8CVSS8.7AI score0.04691EPSS
Exploits0References1
myhack58
myhack58
added 2016/10/17 12:0 a.m.35 views

MS15-0 3 4 IIS 7.0 HTTP.sys a remote code execution vulnerability(CVE-2 0 1 5-1 6 3 5) POC-vulnerability warning-the black bar safety net

Detection script: Python----beebeeto http://www.beebeeto.com/pdb/poc-2015-0081/ !/ usr/bin/env python coding=utf-8 """ Site: http://www.beebeeto.com/ Framework: https://github.com/n0tr00t/Beebeeto-framework """ import socket import random import urlparse from baseframe import BaseFrame class...

1.8AI score
Exploits0
OpenVAS
OpenVAS
added 2016/04/13 12:0 a.m.25 views

Microsoft Windows 'HTTP.sys' Denial of Service Vulnerability (3148795)

This host is missing an important security update according to Microsoft Bulletin MS16-049. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.8CVSS7.8AI score0.43281EPSS
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2016/04/12 7:0 a.m.24 views

HTTP.sys Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP 2.0 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become...

7.8CVSS2.1AI score0.43281EPSS
Exploits0
Nmap
Nmap
added 2015/05/22 4:23 a.m.1447 views

http-vuln-cve2015-1635 NSE Script

Checks for a remote code execution vulnerability MS15-034 in Microsoft Windows systems CVE2015-2015-1635. The script sends a specially crafted HTTP request with no impact on the system to detect this vulnerability. The affected versions are Windows 7, Windows Server 2008 R2, Windows 8, Windows...

10CVSS9.4AI score0.9431EPSS
Exploits49
myhack58
myhack58
added 2015/04/16 12:0 a.m.50 views

IIS remote code execution vulnerability, CVE-2 0 1 5-1 6 3 5-the vulnerability warning-the black bar safety net

In Microsoft 4 on 1 4, patch released the patch, there is one for the IIS server remote code execution vulnerability hazard is very large, please the majority of users attention. Vulnerability information A remote code execution vulnerability exists in the HTTP Protocol stack HTTP.sys, when the...

2AI score
Exploits0
myhack58
myhack58
added 2015/04/16 12:0 a.m.82 views

IIS the latest high-risk Vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. THE POC and online detection of source-vulnerability warning-the black bar safety net

! HTTP. sys remote code execution vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4. the A remote code execution vulnerability exists in the HTTP Protocol stack HTTP.sys, when the HTTP.sys not correct parsing specially crafted HTTP request to cause this vulnerability. Successful exploitation of...

10CVSS0.3AI score0.9431EPSS
Exploits16
Metasploit
Metasploit
added 2015/04/15 6:13 p.m.93 views

MS15-034 HTTP Protocol Stack Request Handling Denial-of-Service

This module will check if scanned hosts are vulnerable to CVE-2015-1635 MS15-034, a vulnerability in the HTTP protocol stack HTTP.sys that could result in arbitrary code execution. This module will try to cause a denial-of-service. This module requires Metasploit: https://metasploit.com/download...

9.8CVSS9.4AI score0.9431EPSS
Exploits16
OpenVAS
OpenVAS
added 2015/04/15 12:0 a.m.782 views

Microsoft HTTP.sys RCE Vulnerability (MS15-034) - Active Check

This host is missing an important security update according to Microsoft Bulletin MS15-034. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

10CVSS8.3AI score0.9431EPSS
Exploits16References5
Tenable Nessus
Tenable Nessus
added 2015/04/14 12:0 a.m.392 views

MS15-034: Vulnerability in HTTP.sys Could Allow Remote Code Execution (3042553)

The version of Windows running on the remote host is affected a vulnerability in the HTTP protocol stack HTTP.sys due to improperly parsing crafted HTTP requests. A remote attacker can exploit this to execute arbitrary code with System privileges. C Tenable Network Security, Inc...

10CVSS8.6AI score0.9431EPSS
Exploits16References2
Positive Technologies
Positive Technologies
added 2015/04/14 12:0 a.m.2 views

PT-2015-1051

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold Microsoft Windows Server 2012 R2 Description A remote code execution issue exists in the HTTP protocol...

10CVSS9.7AI score0.9431EPSS
Exploits16References23
CNVD
CNVD
added 2015/01/21 12:0 a.m.1 views

Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00466)

Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris that allows attackers to exploit the 'TCP/IP' protocol to compromise the 'Network' subcomponent...

5CVSS6.7AI score0.01165EPSS
Exploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.22 views

Affix Bluetooth Protocol Stack 3.1/3.2 Signed Buffer Index Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/13347/info A local signed buffer index vulnerability affects Affix Bluetooth Protocol Stack. This issue is due to a failure of the affected utility to properly handle user-supplied buffer size parameters. This issue may b...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.41 views

openSUSE Security Update : kernel (openSUSE-SU-2011:0004-1)

The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2010-4347: A local user could inject ACPI code into the kernel via the world-writable 'customdebug' file, allowing local privilege escalation. CVE-2010-4258: A local attack...

7.8CVSS6.2AI score0.08114EPSS
Exploits50References57
Ubuntu
Ubuntu
added 2014/05/27 6:28 a.m.87 views

USN-2223-1: Linux kernel (Quantal HWE) vulnerabilities

Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. An unprivileged local user could exploit this flaw to obtain potentially sensitive information from kernel memory. CVE-2014-1738 Matthew Daley reported a flaw in the handling of ioctl commands by the floppy...

10CVSS7.5AI score0.04627EPSS
Exploits16
OpenVAS
OpenVAS
added 2013/05/15 12:0 a.m.32 views

Microsoft Windows 'HTTP.sys' Denial of Service Vulnerability (2829254)

This host is missing an important security update according to Microsoft Bulletin MS13-039. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.8CVSS5AI score0.83169EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2013/05/15 12:0 a.m.24 views

Microsoft Windows 'HTTP.sys' Denial of Service Vulnerability (2829254)

This host is missing an important security update according to Microsoft Bulletin MS13-039. OpenVAS Vulnerability Test $Id: secpodms13-039.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows 'HTTP.sys' Denial of Service Vulnerability 2829254 Authors: Arun Kallavi Copyright: Copyright c 2013...

7.8CVSS6.5AI score0.83169EPSS
Exploits1References3
Cvelist
Cvelist
added 2013/03/14 8:0 p.m.24 views

CVE-2012-6544

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...

5.6AI score0.00103EPSS
Exploits0References11
OSV
OSV
added 2013/03/07 12:0 a.m.1 views

UBUNTU-CVE-2012-6544

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...

1.9CVSS5.8AI score0.00103EPSS
Exploits0References11
seebug.org
seebug.org
added 2011/07/14 12:0 a.m.33 views

Windows Bluetooth栈bthport.sys驱动程序远程代码执行漏洞(MS11-053)

BUGTRAQ ID: 48617 CVE ID: CVE-2011-1265 Microsoft Windows Bluetooth stack是蓝牙协议栈的实现。 Microsoft Windows Bluetooth stack在实现上存在远程代码执行漏洞,远程攻击者可通过发送特制的蓝牙报文到受影响系统利用此漏洞导致远程代码执行。此漏洞仅影响带有蓝牙功能的系统。 漏洞源于访问未能正确初始化或处理已经被删除内存对象的方式存在的问题。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows 7...

8.3CVSS8.7AI score0.00476EPSS
Exploits1
Rows per page
Query Builder