1199 matches found
Security update for the MSINFO.exe information disclosure vulnerability in Windows Server 2008: July 11, 2017
Security update for the MSINFO.exe information disclosure vulnerability in Windows Server 2008: July 11, 2017 Summary An information disclosure vulnerability exists in the Windows System Information Console when it improperly parses XML input that contains a reference to an external entity. To...
Security update for the Windows kernel information disclosure vulnerability in Windows Server 2008: July 11, 2017
Security update for the Windows kernel information disclosure vulnerability in Windows Server 2008: July 11, 2017 Summary An information disclosure vulnerability exists when the HTTP.sys server application component improperly handles objects in memory. An attacker who successfully exploited this...
Security update for Windows Server 2008: July 11, 2017
Security update for Windows Server 2008: July 11, 2017 Summary This security update resolves vulnerabilities in Windows Server 2008 that could allow elevation of privilege or information disclosure. To learn more about the vulnerabilities, go to the Security Update Guide. More Information Importa...
Lepide Auditor Suite - createdb() Web Console Database Injection Remote Code Execution Exploit
Exploit for php platform in category remote exploits !/usr/bin/python """ Lepide Auditor Suite createdb Web Console Database Injection Remote Code Execution Vulnerability Vendor: http://www.lepide.com/ File: lepideauditorsuite.zip SHA1: 3c003200408add04308c04e3e0ae03b7774e4120 Download:...
Lepide Auditor Suite - createdb() Web Console Database Injection Remote Code Execution
Lepide Auditor Suite - createdb Web Console Database Injection Remote Code Execution !/usr/bin/python """ Lepide Auditor Suite createdb Web Console Database Injection Remote Code Execution Vulnerability Vendor: http://www.lepide.com/ File: lepideauditorsuite.zip SHA1:...
June 27, 2017—KB4022723 (OS Build 14393.1378)
None None...
Windows kernel information disclosure vulnerability: June 13, 2017
None None...
Windows kernel information disclosure vulnerability: June 13, 2017
None None...
Windows kernel information disclosure vulnerability: June 13, 2017
None None...
QuickSand.io - Tool For Scanning Streams Within Office Documents Plus Xor DB Attack
QuickSand is a compact C framework to analyze suspected malware documents to 1 identify exploits in streams of different encodings, 2 locate and extract embedded executables. By having the ability to locate embedded obfuscated executables, QuickSand could detect documents that contain zero-day or...
Security update for the Windows DNS Server Denial of Service Vulnerability in Microsoft Windows Server 2008: May 9, 2017
Security update for the Windows DNS Server Denial of Service Vulnerability in Microsoft Windows Server 2008: May 9, 2017 Summary A denial of service vulnerability exists in Windows DNS Server if the server is configured to answer version queries. An attacker who successfully exploits this...
HandBrake for Mac Compromised with Proton Spyware
The handlers of the open source HandBrake video transcoder are warning anyone who recently downloaded the Mac version of the software that they’re likely infected with malware. HandBrake warned users on Saturday of a compromise of one of its mirror download servers, and said anyone who grabbed th...
MalwareSearch - A Command Line Tool To Find Malwares
Tool developed for searching malwares at openmalware.org by command line, allowing specific malware download by shell. Soon we'll input more sources like MalShare, MalwareBlacklist, Malware.lu's AVCaesar and Malwr. Usage Optional Arguments: $ malwaresearch.py --h HELP -f FIND -w WRITE usage:...
Insecure Cipher
requests uses an insecure cipher. The library uses the SHA1 hashing algorithm by default which was shown to be compromised with the SHA1 shatter attack. The library also does not offer any alternate hashing algorithm...
HashPump - A Tool To Exploit The Hash Length Extension Attack In Various Hashing Algorithms
A tool to exploit the hash length extension attack in various hashing algorithms. Currently supported algorithms: MD5, SHA1, SHA256, SHA512. Help Menu $ hashpump -h HashPump -h help -t test -s signature -d data -a additional -k keylength HashPump generates strings to exploit signatures vulnerable...
Security update for the scripting engine memory corruption vulnerability in Windows Vista and Windows Server 2008: April 11, 2017
Security update for the scripting engine memory corruption vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0158. More Information Important If you install a language pack after you install this update, you must...
Security update for the Microsoft Office remote code execution vulnerability: April 11, 2017
None None...
Security update for the LDAP elevation of privilege vulnerability in Windows Vista and Windows Server 2008: April 11, 2017
Security update for the LDAP elevation of privilege vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0166. More Information Important If you install a language pack after you install this update, you must reinstal...
Security update for the Hyper-V denial of service vulnerability in Windows Server 2008: April 11, 2017
Security update for the Hyper-V denial of service vulnerability in Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0184. More Information Important If you install a language pack after you install this update, you must reinstall this update...
openssh security and bug fix update
5.3p1-122 - Allow to use ibmca crypto hardware 1397547 - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1405374 5.3p1-121 - Fix missing hmac-md5-96 from server offer 1373836 5.3p1-120 - Prevent infinite loop when Ctrl+Z pressed at password prompt 1218424 - Remove...