Windows Primitive Keylogger Null Free Shellcode

April 28, 2016 007admin Leave a comment

431 bytes small NULL free shellcode for windows that is a primitive keylogger that writes to a file.

Google Releases Security Update for Chrome

April 28, 2016 007admin Leave a comment

Original release date: April 28, 2016

Google has released Chrome version 50.0.2661.94 to address multiple vulnerabilities for Windows, Mac, and Linux. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

US-CERT encourages users and administrators to review the Chrome Releases page and apply the necessary update.

This product is provided subject to this Notification and this Privacy & Use policy.

Debian

DSA-3561 subversion – security update

April 28, 2016 007admin Leave a comment

Several vulnerabilities were discovered in Subversion, a version control
system. The Common Vulnerabilities and Exposures project identifies the
following problems:

Security

HP Security Bulletin HPSBUX03583 SSRT110084 1

April 28, 2016 007admin Leave a comment

HP Security Bulletin HPSBUX03583 SSRT110084 1 – Potential security vulnerabilities have been identified in the HP-UX BIND service running named. These vulnerabilities could be exploited remotely to create a Denial of Service (DoS). Revision 1 of this advisory.

NVD

CVE-2016-1386

April 28, 2016 007admin Leave a comment

The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521.

NVD

CVE-2016-1389

April 28, 2016 007admin Leave a comment

Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695.

NVD

CVE-2016-4349

April 28, 2016 007admin Leave a comment

Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current working directory, aka Bug ID CSCuy56140.

Security Focus