The vulnerability of the SMC-processor GLOBAL_CMD_ID_NEED_LOAD_APP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system allows a perpetrator to trigger a service failure, modify program algorithms (by changing the flags from TRUE/FALSE), or compromise critical data stored in physical memory.

The vulnerability of the SMC-processor GLOBALCMDIDNEEDLOADAPP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system is related to the lack of validation for input data. Exploiting this vulnerability can allow an attacker to cause service failures, modify program...

Cisco Prime Infrastructure Health Monitor - TarArchive Directory Traversal (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Vulnerability', 'Description' = %q This module exploits a vulnerability...

June 18, 2019 — KB4502560 Cumulative Update for .NET Framework 4.8 for Windows 10 version 1607 and Windows Server 2016

None None...

June 18, 2019 — KB4502562 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1709

None None...

UPDATE: Sysdig Falco v0.15.1

PenTestIT RSS Feed Three days ago, an updated version – Sysdig Falco v0.15.1 – was released. It has been some time since I last blogged about this open source behavorial activity monitor which has container support. This release remediates integration issues with Anchore by updating urllib3 and...

Zeek Network Security Monitor Code Issue Vulnerability

Zeek Network Security Monitor Bro is a set of network analysis frameworks that provide network security monitoring, network traffic analysis, and more. A security vulnerability exists in Zeek Network Security Monitor versions prior to 2.6.2. An attacker can exploit this vulnerability to cause a...

Secure your journey to the cloud with free DMARC monitoring for Office 365

Not knowing who is sending email “from” your organization is an enormous problem for IT managers for two reasons. One problem is “shadow IT”—cloud services that employees have signed up for without IT oversight. Many of these services send mail—to employees, customers, or marketing prospects—whic...

CVE-2019-12310: Improper Limitation of a Pathname to a Restricted Directory

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information. Files within this directory were observed to contain sensitive run-time information, including...

PT-2019-12745

Name of the Vulnerable Software and Affected Versions ExaGrid appliances version v4.8.1.1044.P50 Description The issue allows remote attackers to view and retrieve verbose logging information due to a directory traversal vulnerability in the /monitor/data/Upgrade/ directory. This vulnerability ca...

Schneider Electric EM6436 Load Monitor Detection

Binary data 273.prm...

Practical introduction to the Windows PC client common vulnerability discovery-vulnerability warning-the black bar safety net

0X00 why write this article For white, the WEB security aspect seems to have got a complete knowledge of the system and the loopholes in the excavation process, just getting started friends always like to choose the web direction as their direction of development, because for web systems...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2019-4279)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details For details about the vulnerability and information about fixe...

UPDATE: Sysdig Falco v0.15.0

PenTestIT RSS Feed Three days ago, an updated version – Sysdig Falco v0.15.0 – was released. It has been some time since I last blogged about this open source behavorial activity monitor which has container support. This release incorporates a lot of rule updates that are now also tagged the for...

Cisco Prime Infrastructure Health Monitor HA TarArchive - Directory Traversal / Remote Code Execution

!/usr/bin/python """ Cisco Prime Infrastructure Health Monitor HA TarArchive Directory Traversal Remote Code Execution Vulnerability Steven Seeley mrme of Source Incite - 2019 SRC: SRC-2019-0034 CVE: CVE-2019-1821 Example: ======== saturn: mrme$ ./poc.py + usage: ./poc.py + eg: ./poc.py...

EulerOS Virtualization for ARM 64 3.0.1.0 : libvirt (EulerOS-SA-2019-1394)

According to the versions of the libvirt packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest ...

Apache Tomcat 8.5.x < 8.5.31 Denial of Service

Binary data 700694.pasl...

Apache Tomcat 7.0.x < 7.0.75 NIO HTTP Connector Information Disclosure

Binary data 700671.pasl...

Apache Tomcat 8.5.x < 8.5.41 DoS Vulnerability

Binary data 700697.pasl...

Apache Tomcat 7.0.x < 7.0.82 RCE

Binary data 700675.pasl...

Workspace App for MacOS Session disconnects after plugging or unplugging second monitor

ICA Session disconnects The Store Session might disconnect as well. Citrix Viewer quit unexpectedly messages - Log entries indicating encoding termination in CDF traces: 10:27:20:45265,24408,25036,50,twencode,twencode.cpp,116,TwTerminateEncoder,1,Information,"TwTerminateEncoder","" vda-1.csv 3163...