CVE-2015-6313

Cisco TelePresence Server 4.12.29 through 4.24.17 on 7010; Mobility Services Engine MSE 8710; Multiparty Media 310, 320, and 820; and Virtual Machine VM devices allows remote attackers to cause a denial of service memory consumption or device reload via crafted HTTP requests that are not followed...

VMware ESX / ESXi Arbitrary File Modification (VMSA-2013-0016) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by an arbitrary file modification vulnerability due to improper handling of certain Virtual Machine file descriptors. A local attacker can exploit this to read or modify arbitrary files. C Tenable...

Analyzing Linux Malware Sandbox: Limon

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect the Linux malware before execution, during execution, and after execution post-mortem analysis by...

Linux Embedded Firmware Dynamic Analysis: FIRMADYNE

FIRMADYNE is an automated and scalable system for performing emulation and dynamic analysis of Linux-based embedded firmware. It includes the following components: modified kernels MIPS: v2.6.32 , ARM: v4.1 , v3.10 for instrumentation of firmware execution; a userspace NVRAM library to emulate a...

Xen Denial of Service Vulnerability (CNVD-2016-01330)

Xen is a virtualization technology developed by the University of Cambridge that can be used in the Linux kernel, allowing multiple operating systems to run simultaneously. A denial of service vulnerability exists in versions prior to Xen 4.6.x that allows HVM guest users to cause a denial of...

How to trigger a memory dump from a Windows virtual machine

This article describes how to trigger and capture a memory dump from a Windows Virtual Machine VM running on a XenServer 8 or Citrix Hypervisor 8.2 CU1 host. Refer to the Microsoft KB article, Generate a kernel or complete crash dump for more information. Troubleshooting unresponsive Windows VMs...

Apache CloudStack Information Disclosure Vulnerability (CNVD-2016-01066)

Apache CloudStack is a suite of open source cloud computing software from the Apache USA Software Foundation. The software can be used to deploy, manage, and configure public and private clouds IaaS. A security vulnerability exists in Apache CloudStack versions 4.5.1 and earlier. A remote attacke...

JDK: J9 JVM allows code to invoke non-public interface methods

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods...

JDK: J9 JVM allows code to invoke non-public interface methods

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods...

QEMU 'vmxnet3.c' Denial of Service Vulnerability

QEMU is a suite of analog processor software developed by French programmer Fabrice Bellard. A denial of service vulnerability exists in QEMU, which can be exploited by an attacker to cause a QEMU instance to crash, resulting in a denial of service...

The vulnerability of the Oracle Database database management system allows a hacker to execute arbitrary code.

The vulnerability of the Java VM component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely through network packets...

Multiple Vmware Products VMware Tools HGFS Component Elevation of Privilege Vulnerability

VMware Workstation, VMware Player, and VMware Fusion are virtual machine software; VMware ESXi is a set of server virtualization platforms that can be installed directly on physical servers.VMware Tools HGFS is one of the shared folder components. A security vulnerability exists in the VMware Too...

DEBIAN-CVE-2015-1779

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service memory and CPU consumption via a large 1 websocket payload or 2 HTTP headers section...

UBUNTU-CVE-2015-8744

QEMU aka Quick Emulator built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged CAPSYSRAWIO guest user could use this flaw to crash the QEMU process instance resulting in DoS...

IBM B2B Advanced Communications Information Disclosure Vulnerability

IBM B2B Advanced Communication is a communication gateway product from IBM USA. An information disclosure vulnerability exists in IBM B2B Advanced Communications versions 1.0.0.2 and 1.0.0.3. An attacker can exploit the vulnerability to obtain sensitive information in error response messages with...

[SECURITY] Fedora 23 Update: mono-4.0.5-2.fc23

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries...

Stop Error "0x0000005D" or "0x000000C4" Appears When Installing Windows Server 2012 in XenServer 6.x

Stop Error "0x0000005D" or "0x000000C4" appears when starting a Virtual Machine from the Windows Server 2012 ISO, in order to install the system. The error occurs right after loading the setup files, before the actual setup starts...

QEMU heap buffer overflow vulnerability (CNVD-2015-08495)

QEMU is a suite of analog processor software. QEMU suffers from a buffer overflow vulnerability that allows an attacker to exploit the vulnerability to corrupt a VM virtual machine image and conduct a denial of service attack...

Xen 'hvm/irq.c' Denial of Service Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A denial of service vulnerability...

Damn Vulnerable Node Application: DVNA

Damn Vulnerable Node Application DVNA is a node.js web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid...