UPDATE: Kali Linux 2018.1 Release!

PenTestIT RSS Feed Second post of the new year and it is about the latest Kali Linux 2018.1 release! The last Kali Linux release was made available in the month of November. As usual, this new release includes all patches, fixes, updates, and improvements since the last release - Kali Linux 2017....

Kali Linux 2018.1 Release - The Best Penetration Testing Distribution

Kali Linux 2018.1 the first release of 2018, this fine release contains all updated packages and bug fixes since our 2017.3 release last November. This release wasn’t without its challenges–from the Meltdown and Spectre excitement patches will be in the 4.15 kernel to a couple of other nasty bugs...

Fuji Electric V-Server VPR Stack Buffer Overflow Vulnerability

Fuji Electric V-Server is a data collection software from Fuji Electric Japan, and VPR is a layout routing tool for array-based FPGAs. A stack buffer overflow vulnerability exists in Fuji Electric V-Server VPR 4.0.1.0 and earlier versions, which can be exploited by an attacker to remotely execute...

CVE-2018-5442

A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution...

Stack overflow

A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2018-5442

A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2018-5442

A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2018-5442

Fuji Electric V-Server VPR is affected by CVE-2018-5442, a Stack-based Buffer Overflow in VPR 4.0.1.0 and earlier. The vulnerability arises from improper validation of user-supplied data during project file parsing, copying data into a fixed-length buffer, which can lead to remote code execution....

HTML Template Engine 1.0 Database Disclosure

| Title : html template engine 1.0 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on: windows 8.1 FranASSais V.Pro | Vendor : SourceForge: Kanator / http://adyou.me/4TVD ========================================================= !/usr/bin/perl -w Autho...

Fuji Electric V-Server VPR

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Fuji Electric Equipment: V-Server VPR Vulnerability: Stack-based Buffer Overflow AFFECTED PRODUCTS The following versions of V-Server VPR, a data collection and management service, are affected: V-Server VPR 4.0.1.0 a...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2018:0169 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

January 31, 2018—KB4058258 (OS Build 16299.214)

None None...

Failed to open VM attachment

Challenge Veeam ONE generates "Failed to open VM attachment" alarm. Cause Veeam ONE triggers " Failed to open VM attachment" alarm when the following Windows events are registered on the Hyper-V host: 12290 Microsoft-Windows-Hyper-V-Worker 12290 Microsoft-Windows-Hyper-V-SynthStor 12290...

Security Bulletin: NVIDIA Driver Security Updates for CPU Speculative Side Channel Vulnerabilities

NVIDIA driver response to CPU speculative side channel vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero’s January 3, 2018 publication of novel information disclosure attacks tha...

XenDesktop Setup Wizard completes without error, but there's no VM has been created in Hyper-V SCVMM

XenDesktop Setup Wizard completes without error, but no VM has been created in Hyper-V SCVMM. And there's noparticular error messages from CDF trace either...

v-werbung.com XSS vulnerability

Open Bug Bounty ID: OBB-449949 Description| Value ---|--- Affected Website:| v-werbung.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Design/Logic Flaw

The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement LSA. A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop ...

CVE-2017-4920

The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement LSA. A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop ...

CVE-2017-4920

The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement LSA. A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop ...

CVE-2017-4920

The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement LSA. A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop ...