Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the linux-headers-2.6.26-2-footbridge package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

Multiple vulnerabilities in the Debian GNU/Linux operating system’s file package, whose exploitation may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the enterprise automation system 1C:Enterprise, which allows a malicious individual to cause service failures

The 1C:Enterprise system contains a vulnerability in the Fast Infoset decoder of the xml2.dll library, which is used for working with XML documents. A malicious individual can manipulate input data, causing the Fast Infoset decoder to become in the EIIINDEXLARG state. This allows them to send an...

CVE-2016-2207

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

CVE-2016-2207

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

Design/Logic Flaw

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

CVE-2016-2207

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

CVE-2016-3646

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

CVE-2016-3646: Improper Input Validation

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

Mobile Advertising Firm Found Tracking Users To Pay $950K

After settling charges with the Federal Trade Commission this week a mobile advertising company will pay nearly $1M after it was determined the company tracked customers – including children – without their consent. InMobi, an India-based firm with offices across the world, will pay $950,000 in...

Adobe Flash Player Infinite Recursion Arbitrary Read Access Violation

SUMMARY A potentially exploitable read access violation vulnerability exists in the a way Adobe Flash Player handles infinitely recursive calls. A specially crafted ActionScript code can cause a read access violation which can potentially be further abused. To trriger this vulnerability user...

FBI Wants Biometric Database Exempt From Privacy Rules

Civil liberties and privacy groups are petitioning the U.S. government for more time to fight the FBI’s request to exempt itself from lawsuits related to its warehouse of an estimated 100 million biometric records if it’s found in violation of the federal Privacy Act of 1974. At issue is the...

TCPDump 4.5.1 Crash Proof Of Concept

Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LTS from subprocess import call from shlex import...

CCextractor 0.80 Access Violation Crash

Exploit Title: CCextractor 0.80 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Xino.co.uk Vendor Homepage: http://www.ccextractor.org/ Software Link: http://www.ccextractor.org/download-ccextractor.html Version: 0.80 Tested on: Ubuntu 14 LTS CVE : 0 day from subprocess...

TCPDump 4.5.1 - Crash (PoC)

Exploit for linux platform in category dos / poc Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LT...

CCextractor 0.80 - Crash (PoC)

Exploit for linux platform in category dos / poc Exploit Title: CCextractor 0.80 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Xino.co.uk Vendor Homepage: http://www.ccextractor.org/ Software Link: http://www.ccextractor.org/download-ccextractor.html Version: 0.80 Test...

CCextractor 0.80 - Crash (PoC)

CCextractor 0.80 - Crash PoC Exploit Title: CCextractor 0.80 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Xino.co.uk Vendor Homepage: http://www.ccextractor.org/ Software Link: http://www.ccextractor.org/download-ccextractor.html Version: 0.80 Tested on: Ubuntu 14 LTS...

TCPDump 4.5.1 - Crash (PoC)

TCPDump 4.5.1 - Crash PoC Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LTS from subprocess impor...

TCPDump 4.5.1 - Crash (PoC)

Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LTS from subprocess import call from shlex import...

CCextractor 0.80 - Crash (PoC)

Exploit Title: CCextractor 0.80 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Xino.co.uk Vendor Homepage: http://www.ccextractor.org/ Software Link: http://www.ccextractor.org/download-ccextractor.html Version: 0.80 Tested on: Ubuntu 14 LTS CVE : 0 day from subprocess...