1210 matches found
QuickSand.io - Tool For Scanning Streams Within Office Documents Plus Xor DB Attack
QuickSand is a compact C framework to analyze suspected malware documents to 1 identify exploits in streams of different encodings, 2 locate and extract embedded executables. By having the ability to locate embedded obfuscated executables, QuickSand could detect documents that contain zero-day or...
Security update for the Windows DNS Server Denial of Service Vulnerability in Microsoft Windows Server 2008: May 9, 2017
Security update for the Windows DNS Server Denial of Service Vulnerability in Microsoft Windows Server 2008: May 9, 2017 Summary A denial of service vulnerability exists in Windows DNS Server if the server is configured to answer version queries. An attacker who successfully exploits this...
HandBrake for Mac Compromised with Proton Spyware
The handlers of the open source HandBrake video transcoder are warning anyone who recently downloaded the Mac version of the software that they’re likely infected with malware. HandBrake warned users on Saturday of a compromise of one of its mirror download servers, and said anyone who grabbed th...
MalwareSearch - A Command Line Tool To Find Malwares
Tool developed for searching malwares at openmalware.org by command line, allowing specific malware download by shell. Soon we'll input more sources like MalShare, MalwareBlacklist, Malware.lu's AVCaesar and Malwr. Usage Optional Arguments: $ malwaresearch.py --h HELP -f FIND -w WRITE usage:...
Insecure Cipher
requests uses an insecure cipher. The library uses the SHA1 hashing algorithm by default which was shown to be compromised with the SHA1 shatter attack. The library also does not offer any alternate hashing algorithm...
HashPump - A Tool To Exploit The Hash Length Extension Attack In Various Hashing Algorithms
A tool to exploit the hash length extension attack in various hashing algorithms. Currently supported algorithms: MD5, SHA1, SHA256, SHA512. Help Menu $ hashpump -h HashPump -h help -t test -s signature -d data -a additional -k keylength HashPump generates strings to exploit signatures vulnerable...
Security update for the Microsoft Office remote code execution vulnerability: April 11, 2017
None None...
Security update for the scripting engine memory corruption vulnerability in Windows Vista and Windows Server 2008: April 11, 2017
Security update for the scripting engine memory corruption vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0158. More Information Important If you install a language pack after you install this update, you must...
Security update for the LDAP elevation of privilege vulnerability in Windows Vista and Windows Server 2008: April 11, 2017
Security update for the LDAP elevation of privilege vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0166. More Information Important If you install a language pack after you install this update, you must reinstal...
Security update for the Hyper-V denial of service vulnerability in Windows Server 2008: April 11, 2017
Security update for the Hyper-V denial of service vulnerability in Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0184. More Information Important If you install a language pack after you install this update, you must reinstall this update...
openssh security and bug fix update
5.3p1-122 - Allow to use ibmca crypto hardware 1397547 - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1405374 5.3p1-121 - Fix missing hmac-md5-96 from server offer 1373836 5.3p1-120 - Prevent infinite loop when Ctrl+Z pressed at password prompt 1218424 - Remove...
March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2
March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS17-022 Security update for Microsoft XML Core Services MS17-021 Security update for DirectShow...
Fedora 25 : suricata (2017-f3aac83a8f)
This is a new upstream feature and security release. Improvements include: bypass; pre-filter -- fast packet keywords; TLS improvements; ICS protocol additions: DNP3 CIP/ENIP; SHA1/SHA256 for file matching, logging & extraction; NIC offloading disabled by default; unix socket enabled by default;...
Veeam ONE Database Calculator for Virtual Infrastructure and Veeam Backup & Replication Monitoring
New Interactive Calculator An updated interactive calculator is now available to replace the legacy Excel file included with this article. Veeam ONE Calculator Solution Summary This Veeam ONE database sizing calculator will help estimate the database size required to retain one year of historical...
PHP study notes and security vulnerabilities-vulnerability warning-the black bar safety net
System variables $POST // get the post data is a dictionary $GET // get get data, is a dictionary The error control operator PHP supports one error control operator:@the. When it is placed in a PHP expression, the expression may produce any error information is ignored. Variable default value Whe...
In-depth analysis of TIMA any kernel module authentication bypass vulnerability-vulnerability warning-the black bar safety net
In order to ensure that the Android device in Linux kernel the integrity of the, Samsung introduced a named“lkmauth”function. This function was originally designed to ensure that only the Samsung-approved those that the kernel module can only be loaded into the Linux kernel. TIMA any kernel modul...
TIMA Arbitrary Kernel Module Verification Bypass Vulnerability
Samsung's lkmauth feature suffers from a kernel module verification bypass vulnerability. TIMA Arbitrary Kernel Module Verification Bypass In order to ensure the integrity of the Linux Kernel on Android devices, Samsung has introduced a feature called "lkmauth". This feature is meant to make sure...
MS16-147: Description of the security update for Microsoft Uniscribe: December 13, 2016
None None...
TP-LINK TD-W8151N - Denial of Service
TP-LINK TD-W8151N - Denial of Service Exploit Title: TP-LINK TD-W8151N - Denial of Service Date: 2016-12-13 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Demo : https://www.youtube.com/watch?v=WrGgHvhiCGg POC : flagFre...
SSL Certificate Signed Using Weak Hashing Algorithm (Known CA)
The remote service uses a known CA certificate in the SSL certificate chain that has been signed using a cryptographically weak hashing algorithm e.g., MD2, MD4, MD5, or SHA1. These signature algorithms are known to be vulnerable to collision attacks CVE-2004-2761, for example. An attacker can...