USB Anti Forensic Tool: usbdeath

USB Anti Forensic Tool anti-forensic tool that writes udev rules for known usb devices and do some things at unknown usb device insertion or specific usb device removal. usbdeath is a small script inspired by usbkill , “an anti-forensic kill-switch that waits for a change on your USB ports and th...

Metasploit Service Persistence Module

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Service Persistence', 'Description' = %q This module will create a service on the box, and mark it for auto-restart. We need enough access to writ...

CVE-2015-8945

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal...

Design/Logic Flaw

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal...

CVE-2015-8945

CVE-2015-8945 affects OpenShift Origin 1.1.6 and earlier, specifically the openshift-node component. When the --credentials option is used, router credentials were inappropriately stored as environment variables inside pods, enabling a local attacker to read sensitive private key information by i...

systemd information disclosure vulnerability (CNVD-2016-05693)

systemd is a Linux-based system and service manager developed by German software developer Lennart Poettering and others. It is compatible with the SysV and LSB startup scripts and provides a framework for representing dependencies between system services. An information disclosure vulnerability...

Fedora 24 : libvirt (2016-65cc608ebe)

Rebased to version 1.3.3.2 - Fix xen default video device config bz 1336629 - Don't reject duplicate disk serials bz 1349895 - Fix LXC cgroup name mismatch bz 1350139 - Fix managed save/restore with VM USB Keyboard bz 1353222 - Missing dep on systemd-container bz 1355784 - CVE-2016-5008: Setting...

CVE-2015-8946

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2016-6224

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a 1 NVMe or 2 MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an...

Information disclosure

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

DEBIAN-CVE-2015-8946

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2015-8946

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2015-8946

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2015-8946

Summary : CVE-2015-8946 affects the ecryptfs-utils package (eCryptfs) and its helper, specifically the swap setup in ecryptfs-setup-swap. The issue occurs when using GPT partitioning (and in some cases with certain systemd versions), where encrypted swap is not properly configured, potentially al...

Updated util-linux packages fix security vulnerability

The util-linux libblkid is vulnerable to a Denial of Service attack during MSDOS partition table parsing, in the extended partition boot record EBR. If the next EBR starts at relative offset 0, parsedosextended will loop until running out of memory. An attacker could install a specially crafted...

Fedora 22 : xen (2016-8fd9019541)

in systemd only try to load kernel modules that are in Fedora 1291089 x86 software guest page walk PS bit handling flaw XSA-176, CVE-2016-4480 1332657 ---- create link to /usr/bin/qemu-system-i386 from /usr/lib/xen/bin for back compatibility and for virt-manager, cleaner fix for XSA-179 on...

Service Persistence

This module will create a service on the box, and mark it for auto-restart. We need enough access to write service files and potentially restart services Targets: System V: CentOS = 9, = 9.10, = 7, = 15 Ubuntu = 15.04 Note: System V won't restart the service if it dies, only an init change reboot...

openSUSE Security Update : systemd (openSUSE-2016-648)

This update for SystemD provides fixes and enhancements. The following security issue has been fixed : - Don't allow read access to journal files to users. bsc972612, CVE-2014-9770, CVE-2015-8842 The following non-security issues have been fixed : - Restore initrd-udevadm-cleanup-db.service...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2016:1351-1)

This update for SystemD provides fixes and enhancements. The following security issue has been fixed : - Don't allow read access to journal files to users. bsc972612, CVE-2014-9770, CVE-2015-8842 The update package also includes non-security fixes. See advisory for details. Note that Tenable...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2016:1346-1)

This update for SystemD provides fixes and enhancements. The following security issue has been fixed : - Don't allow read access to journal files to users. bsc972612, CVE-2014-9770, CVE-2015-8842 The update package also includes non-security fixes. See advisory for details. Note that Tenable...