Aggregator

A vulnerability was found in CamShot WebCam 2.5. It has been declared as critical. This vulnerability affects unknown code of the component HTTP GET Handler. The manipulation leads to memory corruption. This vulnerability was named CVE-2000-0043. The attack can be initiated remotely. Furthermore, there is an exploit available.

ThievingFox ThievingFox is a collection of post-exploitation tools to gather credentials from various password managers and Windows utilities. Each module leverages a specific method of injecting into the target process and then hooks internal...

The post ThievingFox: gather credentials from various password managers and Windows utilities appeared first on Penetration Testing Tools.

POSTDump Another tool to perform a minidump of the LSASS process using a few technics to avoid detection. POSTDump is the C# / .NET implementation of the ReactOS minidump function (like nanodump), thus avoiding...

The post POSTDump: perform minidump of LSASS process using few technics to avoid detection appeared first on Penetration Testing Tools.

Hardening Meter HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems. Its robust capabilities include thorough checks of various binary exploitation protection mechanisms, including Stack...

The post HardeningMeter: The Python Tool for Thorough Security Hardening Evaluation appeared first on Penetration Testing Tools.

A vulnerability has been found in Apple watchOS up to 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Kernel. The manipulation leads to memory corruption. This vulnerability is known as CVE-2017-13867. An attack has to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Interspire ActiveKB. It has been classified as critical. This affects an unknown part of the file loadpanel.php. The manipulation of the argument Panel leads to path traversal. This vulnerability is uniquely identified as CVE-2009-4957. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

辞旧迎新，扬帆起航

A vulnerability has been found in Apple macOS up to 10.13.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Kernel. The manipulation leads to memory corruption. This vulnerability is known as CVE-2017-13867. Local access is required to approach this attack. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, was found in Onedesigns Cover WP up to 1.5.3. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2011-3860. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Database Server up to 10.1. It has been classified as critical. This affects an unknown part. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2008-6065. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in libtiff up to 3.8.2. This affects an unknown part. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2006-2656. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Database Server 9.2.0.8dv. It has been classified as very critical. This affects an unknown part. The manipulation leads to Remote Code Execution. This vulnerability is uniquely identified as CVE-2008-0339. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

受 DeepSeek 市场冲击，英伟达市值单周缩水 5520 亿美元； iPhone 在华销量下滑 11%；春晚《秧 BOT》机器人不穿裤子原因：跟关节冲突妨碍行走、也会削弱科技感

A vulnerability was found in Thiago Melo De Paula Change passwd 3.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2006-0331. Local access is required to approach this attack. Furthermore, there is an exploit available.

A vulnerability was found in Oracle Collaboration Suite 10.1.2.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component User Interface. The manipulation leads to an unknown weakness. This vulnerability is handled as CVE-2010-0881. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Sun JRE 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2010-0847. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as very critical has been found in Adobe Illustrator 13.0.0/14.0.0. This affects an unknown part. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2009-4195. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.