RHEL 6 : kernel-rt (RHSA-2012:1282)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1282 advisory. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: It...

RHEL 6 : MRG (RHSA-2014:0557)

Updated kernel-rt packages that fix multiple security issues are now available for Red Hat Enterprise MRG 2.5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

CVE-2014-1474

Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service CPU consumption via a string without an address...

UBUNTU-CVE-2014-1474

Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service CPU consumption via a string without an address...

CVE-2014-1474: Undefined Security Weakness

Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service CPU consumption via a string without an address...

Microsoft issues Emergency Windows Update to Block Fake SSL Certificates

Today, Microsoft has issued an emergency update for almost all versions of Windows and also for Microsoft devices running Windows Phone 8 and 8.1 to secure users from attacks that abuse the latest issued rogue SSL certificates, which could be used to impersonate Google and Yahoo! websites. A week...

CVE-2014-1824

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...

Privilege escalation

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly restrict the exchange of keyboard and mouse data between programs at different integrity levels, which allows...

CVE-2014-1824

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...

Microsoft Windows Ancillary Function Driver CVE-2014-1767 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...

CVE-2014-1824: Improper Control of Generation of Code

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...

Microsoft Security Advisory: Registry update to improve credentials protection and management for Windows-based systems that have the 2919355 update installed: July 8, 2014

None None...

Microsoft Windows On-Screen Keyboard CVE-2014-2781 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary programs with elevated privileges. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +38 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.7.0, <=2.7.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.7.0, =1.1.7, =1.1.9, =1.2.5, =ec2-2013-02-01, =1.0.1, =1.0.0, =1.0.0, =1.1, =2.11.0, =2.12.2 - org.apache.cxf.fediz.examples.wsclientwebapp.webservice:fedizservice 1.1.0 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp 1.1.0 -...

com.fluxcorp.plugins:webservice-trigger (>=1.0.2, <=1.0.4), com.github.mkluas:web-admin (>=1.0.0, <=1.1.0) +76 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.0.6, <=2.6.11)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.0.6, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.0.3, =2.5.0, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.3 and more Source cves: CVE-2014-0034 Source advisory: MEND:CVE-2014-0034...

MIPS Little Endian Shellcode

No description provided by source. Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Websit...

ASUS RT-N56U - Remote Root Shell Buffer Overflow (ROP)

No description provided by source. !/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jacob Holcomb/Gimppy -...

Asus RT-N66U 3.0.0.4.374_720 - CSRF Vulnerability

Description: The Asus RT-N66U is a home wireless router. Its web application has a CSRF vulnerability that allows an attacker to execute arbitrary commands on the target device. Exploitable URL: The parameter SystemCmd in the URL below causes the device to execute arbitrary commands. The value...

ASUS RT-AC66U acsd Param - Remote Root Shell Exploit

No description provided by source...

Windows RT ARM Bind Shell (Port 4444)

No description provided by source. ; Title: Windows RT ARM Bind Shell Port 4444 ; Date: July 28, 2013 ; Author: Matthew Graeber @mattifestation ; Blog post: http://www.exploit-monday.com/2013/07/WinRT-ARM-Shellcode.html ; Tested on: Microsoft Surface RT Tablet w/ Windows RT 6.2.9200 ; License: BS...