Important: Red Hat Security Advisory: Container-native Virtualization security, bug fix, and enhancement update

Red Hat OpenShift Virtualization release 2.4.0 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which giv...

Stack overflow

Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non-eXecutable bit NX, stack smashing protector SSP, and address space layout randomization ASLR protection mechanisms, which could let a malicious user execute...

CVE-2014-5439

SniffIt before 0.3.7 contains multiple stack-based buffer overflow vulnerabilities triggered by crafted configuration files, allowing arbitrary code execution (as reported across NVD/OSV/Ubuntu/Debian advisories). The issue bypasses NX/SSP/ASLR protections and is documented in multiple feeds (NVD...

HTTP Host Information via NTLM SSP over HTTP(S)

Binary data httpntlminfo.nbin...

Memory Corruption Vulnerability in SAMSoar Developer

SAMSoar Developer is a configuration software produced by Shenzhen Xianzhong Technology Co. SAMSoar Developer has a memory corruption vulnerability in the processing of ssp project files, which can be exploited by attackers to gain control of the user's system or crash the program...

SAMSoar Developer suffers from dll hijacking vulnerability

Shenzhen Xianzhong Technology is a national high-tech enterprise specializing in the research and development, production, sales and service of Industry 4.0 core products. SAMSoar Developer has a dll hijacking vulnerability when processing ssp files, which can be exploited by attackers to load...

ssp-worldwide.com XSS vulnerability

Open Bug Bounty ID: OBB-663580 Description| Value ---|--- Affected Website:| ssp-worldwide.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows: Network security: Minimum session security for NTLM SSP based clients

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnsecminsessionsecntlmserver.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Network security: Minimum session security for NTLM SSP based including secure RPC servers Authors: Emanuel Moss Copyright: Copyright c 20...

Microsoft Windows: Network security: Minimum session security for NTLM SSP based clients

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnsecminsessionsecntlmclient.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Network security: Minimum session security for NTLM SSP based including secure RPC clients Authors: Emanuel Moss Copyright: Copyright c 20...

POP3 Host Information in NTLM SSP

Nessus can obtain information about the host by examining the NTLM SSP challenge issued during the NTLM authentication, over POP3 protocol. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108806; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate"...

MSSQL Host Information in NTLM SSP

Binary data mssqlntlminfo.nbin...

ssp-rtb.sape.ru Open Redirect vulnerability

Vulnerable URL:...

Directory traversal

Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy SSP 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to read arbitrary files via a crafted URL...

CVE-2016-6023

IBM Sterling Secure Proxy Configuration Manager is affected by CVE-2016-6023, a directory traversal vulnerability in SSP 3.4.2 (prior to 3.4.2.0 iFix 8) and 3.4.3 (prior to 3.4.3.0 iFix 1). An attacker can read arbitrary files via a crafted URL. The issue is addressed by applying the fixed releas...

CVE-2016-6027

CVE-2016-6027 affects IBM Sterling Secure Proxy Configuration Manager (SSP CM). The issue is that HSTS protection was not enabled in SSP Configuration Manager, making it possible for an attacker to obtain sensitive information or modify data by exploiting HTTP instead of HTTPS. Affected versions ...

PT-2021-3057

Name of the Vulnerable Software and Affected Versions 802.11 standard affected versions not specified Check Point GAiA affected versions not specified Description The issue concerns a flaw in the authentication procedure of the 802.11 standard, which underlies Wi-Fi Protected Access WPA, WPA2, an...

Cisco MiniUPnP Stack Smashing Protection Attack

The Internet of Things security challenge is twofold: finding bugs, and more urgent—fixing them. Cisco’s Talos security intelligence and research group found and privately disclosed a serious and trivially exploitable client-side bug in MiniUPnP that was patched in September of last year. The...

HT Editor 2.0.20 Buffer Overflow (ROP PoC)

No description provided by source. !/usr/bin/perl =head1 TITLE HT Editor 2.0.20 Buffer Overflow ROP PoC =head2 DESCRIPTION Since version 2.0.18, the stack overflow vulnerability has not been corrected, which I assume would make it 0day? I consequently recoded an exploit, as memory addresses have...

ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (Linux)

No description provided by source. $Id: proftptelnetiac.rb 11525 2011-01-09 23:33:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

UBUNTU-CVE-2013-4533

Buffer overflow in the pxa2xxsspload function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-rxlevel value in a savevm image...