Lightweight and Practical Kernel Protector for x86: Shadow-Box

Shadow-box is a security monitoring framework for operating systems using state-of-the-art virtualization technologies. Shadow-box has a novel architecture inspired by a shadow play. We made Shadow-box from scratch, and it is primarily composed of a lightweight hypervisor and a security monitor...

Directory Traversal

file-static-server is vulnerable to directory traversal attacks. The attack is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

Security Bulletin: ISC DHCP vulnerability affects TS4500 Tape Library (CVE-2018-5732)

Summary The TS4500 Tape Library may be vulnerable to a denial of service attack if dynamic addressing DHCP is used. Vulnerability Details CVEID: CVE-2018-5732 DESCRIPTION: ISC DHCP is vulnerable to a denial of service, caused by a buffer overflow in dhclient. By sending a specially crafted...

Augustine Path Traversal Vulnerability

augustine is a static HTTP server used in Node.js. A path traversal vulnerability exists in augustine, which stems from the program's lack of url validation. The vulnerability can be exploited by sending a specially crafted GET request to read the contents of an arbitrary file with a known path...

Security update for bouncycastle (moderate)

This update for bouncycastle to version 1.59 fixes the following issues: These security issues were fixed: - CVE-2017-13098: BouncyCastle, when configured to use the JCE Java Cryptography Extension for cryptographic functions, provided a weak Bleichenbacher oracle when any TLS cipher suite using...

public node module path traversal vulnerability

The public node module is a module that can run a static file hosting server using a public directory and port. A path traversal vulnerability exists in the public node module, which stems from the program's lack of detection of file paths. An attacker could use this vulnerability to read the...

626 node module path traversal vulnerability

626 node module is a static server. A path traversal vulnerability exists in 626 node module, which stems from the program failing to filter the path of a requested file. An attacker could use this vulnerability to read the contents of an arbitrary file...

mcstatic node module path traversal vulnerability (CNVD-2018-11446)

The mcstatic node module is a static server. A path traversal vulnerability exists in mcstatic node module, which stems from the program's lack of file path detection. An attacker can exploit this vulnerability to read the contents of an arbitrary file...

Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable from the same local network segment OSI Layer 2 Vendor: Siemens Equipment: SCALANCE X switches, RUGGEDCOM Win, RFID 181-EIP, and SIMATIC RF182C Vulnerability: Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a...

CVE-2017-5453

A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. This vulnerability allows for spoofing but no scripted content can be run. This vulnerability affects Firefox 53...

ecstatic node module denial of service vulnerability

ecstatic node module is a http cooperative static file server middleware . A security vulnerability exists in ecstatic node module versions prior to 1.4.0. An attacker can exploit this vulnerability to cause a denial of service crash by sending input with the help of the If-Modified-Since packet...

Directory Traversal

static-html-server is vulnerable to directory traversal attacks. These attacks are possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

dcdcdcdcdcdc Directory Traversal Vulnerability

dcdcdcdcdc is a static file server. A directory traversal vulnerability exists in dcdcdcdcdc. An attacker can exploit this vulnerability by placing ". /" in a URL to access the file system...

Serverabc Directory Traversal Vulnerability

serverabc is a static file server. A directory traversal vulnerability exists in serverabc. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

Serverxxx Directory Traversal Vulnerability

serverxxx is a static file server. A directory traversal vulnerability exists in serverxxx. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

360class.jansenhm Directory Traversal Vulnerability

360class.jansenhm is a static file server. A directory traversal vulnerability exists in 360class.jansenhm. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

mfrs directory traversal vulnerability

mfrs is a static file server. A directory traversal vulnerability exists in mfrs. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

hcbserver directory traversal vulnerability

hcbserver is a static file server. A directory traversal vulnerability exists in hcbserver. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

liuyaserver directory traversal vulnerability

liuyaserver is a static file server. A directory traversal vulnerability exists in liuyaserver. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

qinserve Directory Traversal Vulnerability

qinserve is a static file server. A directory traversal vulnerability exists in qinserve. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...