PT-2018-4583 · Harfbuzz +1 · Harfbuzz +1

Name of the Vulnerable Software and Affected Versions: HarfBuzz versions prior to 1.0.4 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid read of two bytes and application crash. This is due to mishandling of GPOS and GSUB tables, related to file...

PCProtect 4 8.35 Privilege Escalation

Exploit Title : PCProtect v4.8.35 - Weak File Premissions Privilege Escalation Date : 09/11/2018 Exploit Author : Hashim Jawad - @ihack4falafel Vendor Homepage : https://www.pcprotect.com/ Vulnerable Software: https://www.pcprotect.com/download Tested on : Windows 7 Enterprise SP1 x64 Description...

openSUSE Security Update : zsh (openSUSE-2018-699)

This update for zsh to version 5.5 fixes the following issues : Security issues fixed : - CVE-2018-1100: Fixes a buffer overflow in utils.c:checkmailpath that can lead to local arbitrary code execution bsc1089030 - CVE-2018-1071: Fixed a stack-based buffer overflow in exec.c:hashcmd bsc1084656 -...

Security update for zsh (moderate)

This update for zsh to version 5.5 fixes the following issues: Security issues fixed: - CVE-2018-1100: Fixes a buffer overflow in utils.c:checkmailpath that can lead to local arbitrary code execution bsc1089030 - CVE-2018-1071: Fixed a stack-based buffer overflow in exec.c:hashcmd bsc1084656 -...

cloudpub-redis remote code execution vulnerability

cloudpub-redis is a package for installing redis server. A security vulnerability exists in cloudpub-redis that originates when a program downloads an executable file over an unencrypted HTTP connection. A remote attacker can exploit the vulnerability by intercepting the response and replacing th...

CVE-2018-1137

An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack...

CVE-2018-1137

An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack...

CVE-2018-1137

An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack...

CVE-2018-1137

An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack...

CVE-2018-1137

CVE-2018-1137 affects Moodle 3.x. The issue arises when URLs in portfolios are substituted, allowing an attacker to instantiate any class. This can be exploited by users logged in as guests to launch a DDoS attack. Publicly documented details describe the vulnerability mechanism and impact; no re...

SpookFlare v2.0 - Loader, Dropper Generator With Multiple Features For Bypassing Client-Side And Network-Side Countermeasures

SpookFlare has a different perspective to bypass security measures and it gives you the opportunity to bypass the endpoint countermeasures at the client-side detection and network-side detection. SpookFlare is a loader/dropper generator for Meterpreter, Empire, Koadic etc. SpookFlare has...

Meterpreter Loader Generator: SpookFlare

SpookFlare has a different perspective to bypass security measures and it gives you the opportunity to bypass the endpoint countermeasures at the client-side detection and network-side detection. SpookFlare is a loader/dropper generator for Meterpreter, Empire, Koadic etc. SpookFlare has...

Encryption 101: How to break encryption

Continuing on in our Encryption 101 series, where we gave a malware analyst's primer on encryption and demonstrated encryption techniques using ShiOne ransomware, we now look at what it takes to break an encryption. In order for something as powerful as encryption to break, there needs to be some...

CVE-2017-7375

A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes. Depending on the context, this may expose a higher-risk attack surface in libxml2 not...

CVE-2016-8742

The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB...

The vulnerability of the AppCache mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to perform domain substitution.

The vulnerability of the AppCache mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to defects in the Application Cache system’s functionality. Exploiting this vulnerability allows a malicious actor to replace domains using the “FALLBACK”...

Fingerprinting Digital Documents

In this era of electronic leakers, remember that zero-width spaces and homoglyph substitution can fingerprint individual instances of files...

The vulnerability in the Omnibox browser implementation of Google Chrome allows a hacker to perform domain substitution attacks.

The vulnerability of the Omnibox browser implementation by Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform domain name substitution remotely, using a specially crafted domain name that includes IDN...

The vulnerability in the Omnibox browser implementation of Google Chrome allows a hacker to replace the domain name.

The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient compliance with security policies. Exploiting this vulnerability allows a malicious actor to perform domain substitution using a specially crafted domain name, which includes IDN Internationalized...

The vulnerability in the Omnibox browser implementation of Google Chrome allows a hacker to perform domain substitution attacks.

The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform domain substitution remotely, using a specially created domain name containing the symbol “U+0620”...