CVE-2017-12817

In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted...

CVE-2017-12817

In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted...

Packet Trace Parser: Sniffer

Sniffer is a C program that parses and interprets captured Ethernet traffic containing IP datagrams UDP/TCP, and stores the captured payloads, email messages and HTTP cookies sent into files. General Supply any pcap file, produced by tcpdump, that contains a packet trace for the program to use as...

CVE-2017-12817: Missing Encryption of Sensitive Data

In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted...

Automated Android Malware Analysis: CuckooDroid

CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files. CuckooDroid brigs to cuckoo the capabilities of execution and analysis of android application. CuckooDroid is an automated, cross-platform, emulation and analysis framework based on...

PT-2017-2934

Name of the Vulnerable Software and Affected Versions Kaspersky Internet Security for Android version 11.12.4.1622 Description The issue is related to the lack of encryption for some application trace files. This could allow a remote attacker to disclose confidential information. Recommendations...

MGASA-2017-0226 Updated wireshark packages fix security vulnerabilities

The wireshark package has been updated to version 2.2.8, which fixes several security issues where a malformed packet trace could cause it to crash or go into an infinite loop, and fixes several other bugs as well. See the release notes for details...

CVE-2017-11673

Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed PRE file, related to a "User Mode Write AV starting at reporter!madTraceProcess."...

MGASA-2017-0219 Updated wireshark packages fix security vulnerabilities

The wireshark package has been updated to version 2.0.14, which fixes several security issues where a malformed packet trace could cause it to crash or go into an infinite loop, and fixes several other bugs as well. See the release notes for details...

KLA11072 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause a denial of service. Below is a complete list of vulnerabilities: 1. Multiple unspecified vulnerabilities in the AMQP and MQ dissectors can be exploited remotely via a special...

CVE-2017-7683

Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure...

CVE-2017-7683: Exposure of Sensitive Information to an Unauthorized Actor

Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure...

NetworkRecon: PowerShell to Identify Network Vulnerabilities!

PenTestIT RSS Feed As PowerShell becomes more prevalent in the Windows environment, so will it's use for vulnerability assessment and penetration tests. I have covered a few of them earlier such as PowerSploit, PSAttack. However none of the ones I mentioned help you detect network vulnerabilities...

CVE-2017-7683

Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure...

CVE-2017-7683

Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure...

PT-2017-17882

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 1.0.0 through prior to 3.3.0 Description The issue concerns the display of the Tomcat version and a detailed error stack trace, which is not secure. This could potentially reveal sensitive information...

CVE-2017-1284

IBM WebSphere MQ 9.0.1 and 9.0.2 could allow a local user with ability to run or enable trace, to obtain sensitive information from WebSphere Application Server traces including user credentials. IBM X-Force ID: 125145...

CVE-2017-1284

IBM MQ (WebSphere MQ) versions affected: 8.x up to 8.0.0.6; 9.0.0.0–9.0.0.1; and 9.0.1–9.0.2 (CD). A local user able to enable/trace may obtain sensitive data from WebSphere Application Server traces, including credentials, via CLIENT transport mode traces. Root cause: traces disclose credentials...

PT-2017-12718

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 9.0.1 through 9.0.2 Description A local user with the ability to run or enable trace could obtain sensitive information from WebSphere Application Server traces, including user credentials. Recommendations For IBM...

PVS target on ESXi hardware v10 and v11, fails to boot at "Starting Windows"

Target Devices Failing to boot,hanging at "Starting Windows" Wireshark trace shows Single IO phase of boot but BNIStack driver does not get loaded and no MIO Phase starts...