MalwareSearch - A Command Line Tool To Find Malwares

Tool developed for searching malwares at openmalware.org by command line, allowing specific malware download by shell. Soon we'll input more sources like MalShare, MalwareBlacklist, Malware.lu's AVCaesar and Malwr. Usage Optional Arguments: $ malwaresearch.py --h HELP -f FIND -w WRITE usage:...

HashPump - A Tool To Exploit The Hash Length Extension Attack In Various Hashing Algorithms

A tool to exploit the hash length extension attack in various hashing algorithms. Currently supported algorithms: MD5, SHA1, SHA256, SHA512. Help Menu $ hashpump -h HashPump -h help -t test -s signature -d data -a additional -k keylength HashPump generates strings to exploit signatures vulnerable...

Security update for the Microsoft Office remote code execution vulnerability: April 11, 2017

None None...

Security update for the scripting engine memory corruption vulnerability in Windows Vista and Windows Server 2008: April 11, 2017

Security update for the scripting engine memory corruption vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0158. More Information Important If you install a language pack after you install this update, you must...

Security update for the LDAP elevation of privilege vulnerability in Windows Vista and Windows Server 2008: April 11, 2017

Security update for the LDAP elevation of privilege vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0166. More Information Important If you install a language pack after you install this update, you must reinstal...

Security update for the libjpeg information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017

Security update for the libjpeg information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the libjpeg information disclosure vulnerability, go to CVE-2013-6629. More Information Important If you install a language pack after you...

Security update for the Hyper-V denial of service vulnerability in Windows Server 2008: April 11, 2017

Security update for the Hyper-V denial of service vulnerability in Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0184. More Information Important If you install a language pack after you install this update, you must reinstall this update...

March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2

March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS17-022 Security update for Microsoft XML Core Services MS17-021 Security update for DirectShow...

Fedora 25 : suricata (2017-f3aac83a8f)

This is a new upstream feature and security release. Improvements include: bypass; pre-filter -- fast packet keywords; TLS improvements; ICS protocol additions: DNP3 CIP/ENIP; SHA1/SHA256 for file matching, logging & extraction; NIC offloading disabled by default; unix socket enabled by default;...

CVE-2016-6210

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provid...

Timing Attack

salt is vulnerable to timing attacks. This vulnerability is due to the use of a regular string comparison function to verify an HMAC-SHA256 signature...

openSUSE Security Update : xtrabackup (openSUSE-2017-132)

This update for xtrabackup fixes the following issues : - CVE-2016-6225: xbcrypt encryption IV not being set properly boo1019858 In addition, XtraBackup was updated to 2.3.6 to include the following improvements : - now supports SHA256 passwords - new supports command options for secure connectio...

hipchat server not supporting SSL Forward Secrecy

Security scans report that hipchat server isn't supporting SSL Forward Secrecy. HipChat Server supports TLSRSAWITHAES128CBCSHA256 which isn't forward secret. This is commonly supported for backwards compatibility, but, it is most likely not necessary on most platforms these days. Please consider...

Update rollup for Visual Studio 2010 Tools for Office Runtime

Update rollup for Visual Studio 2010 Tools for Office Runtime Symptoms This update installs the Visual Studio 2010 Tools for Office Runtime. This is required to run Microsoft Office-based solutions that are built by using Microsoft Visual Studio 2010, Visual Studio 2012, and Visual Studio 2013...

MS16-147: Description of the security update for Microsoft Uniscribe: December 13, 2016

None None...

Phabricator: Fetching binaries (for software installation) over HTTP without verification (RCE as ROOT by MITM)

From: https://secure.phabricator.com/book/phabricator/article/installationguide/ Installing Required Components If you are installing on Ubuntu or an RedHat derivative, there are install scripts available which should handle most of the things discussed in this document for you: RedHat Derivative...

MS16-139: Description of the security update for Windows kernel: November 8, 2016

None None...

MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016

MS16-136: Description of the security update for SQL Server 2014 Service Pack 1 CU: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or ...

MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

None None...

SUSE SLES12 Security Update : apache2-mod_nss (SUSE-SU-2016:2396-1) (POODLE)

This update provides apache2-modnss 1.0.14, which brings several fixes and enhancements : - Fix OpenSSL ciphers stopped parsing at +. CVE-2016-3099 - Created valgrind suppression files to ease debugging. - Implement SSLPPTYPEFILTER to call executables to get the key password pins. - Improvements ...